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1.Programmer Overview 


1.1 Programmer hardware parameters 


It is a professional programmer with high cost-effective, made by high-density SMD process, unified operation interface, easy to 


use, complete function, reliable operation of application software program, super small code, faster execution speed, support multi- 


language menu. Supported operating systems: WINXP/WIN7/WIN8/WIN10 operating system. 


1.1.1 XGecu T56 Parameters 


Note: Be sure to use the original USB cable, if you use HUB, it must be a high quality HUB 


6a fe 


PIC32MZ 32-bit MCU 200MHZ + Xilinx SP6 FPGA structure, USB2.0 HS 480MHZ transmission 

Volume: 12.9cm x 8.5cm x 2.9cm 

56-pins powerful pins drivers l|O design. Maximum operating frequency of 50MHZ for all pins, extremely high reliability. 
Stable and reliable 8P in-circuit programmable ISP interface with wire length of more than 40CM, reliable communication 
at 25-45MHZ. 

The highest clock frequency can reach up to 40MHZ-50MHZ for 25 series/EMMC in-circuit programming. 

VCC voltage 1.2-6.5V, 64 levels adjustable, VPP voltage 6.5-25V 64 levels adjustable.lIO voltage 1.2V-3.6V continuously 
adjustable. VCC 120MA-320MA multilevel over current protection continuously adjustable. VPP 120MA overcurrent 
protection. 

Power consumption: 5V <500MA. Static power consumption: 180mA, All chips do not need an external power supply. 
Allow to use an external power supply 5V-5.5V 500MA. 

The programmer has multiple protection for external power supply: over-voltage protection/reverse connection 
protection/over-current protection/under-voltage prompt. 

Maximum read-write speed can reach up to 25-45MB/s 

Open self-test function, self-test on each pin of VPP/VCC/GND/IO 

Suitable for developers and maintenance personnel, suitable for small batch production, support simultaneously working 


with 4 Programmers on each computer 


T866lIl Plus Parameters 


PIC24 16-bit MCU 32MHZ, USB1.1 FS 12MHZ transmission 

Volume: 10cm x 6cm x 2.5cm 

40-pin drive IO design. Non-full drive, 1O voltage is not adjustable. 

VCC voltage 1.8-6.5V 32 levels adjustable, VPP voltage 9V-18V 32 levels adjustable. VCC 120MA over current 
protection, VPP 100MA over current protection. 

Power consumption: 5V <500MA. Static power consumption: 60mA. Without external power supply interface. 
Self-test function, self-test each pin of VPP/VCC/GND/IO 

Suitable for developers and maintenance personnel, can do small batch production for small capacity chips, support 


simultaneously working with 4 Programmers on each computer. 
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1.2 Programmer support chips and functions 


1.2.1XGecu T56 


26 27 28 29 37 39 49 50 series parallel ROM, EPROM, EEPROM, Paged EPROM, Flash Maximum capacity 2GBits. 
24 25 35 45 85 93 95 Serial Series EEPROM, Support 25 FLASH chips: Maximum capacity 2GBits 

Support NAND FLASH: Maximum capacity 256Gbits, NAND can be customized parameters to add new model chips. 
Support SP! NAND: Maximum capacity 8Gbits 

Support EMMC/EMCP: Maximum capacity 256GBits, EMMC/EMCP support one-button cloning, support ISP 
programming 

Microcontroller Series 

GAL/CPLD programmable logic device programming 

Support VGA tool and VGA ISP programming, Can output VGA/HDMI video test signal, read TV or monitor parameters, 
and ISP in-circuit programming 

Super performance 54/74F/LS/HC CMOS4000 series integrated circuit logic test, Can test common logic integrated 
circuit, result can be located to the logic gate circuit, customizable logic vector table, can add new chips to support list. 
Support more packages of DIP42/PLCC44/SOP44/QFP44/TSOP48 on base of TL866 

Support TSOP56/BGA48/BGA63/BGA64/BGA100/BGA153/BGA162/BGA169/BGA221 etc. 


1.2.2 TL866ll Plus 


26 27 28 29 37 39 49 50 Series Parallel ROM, EPROM, EEPROM, Paged EPROM, Flash Maximum capacity 64MBits. 
24 25 35 45 85 93 95 Serial Series EEPROM. Support 25FLASH chips maximum capacity 512MBits 

NAND FLASH TSOP48 chips support up to 8Gbits, NAND can be customized parameters to add new model chips. 
Microcontroller Series 

GAL programmable logic device programming 

SRAM test, support common 24 61 62 DS12 series SRAM test, support data line test, address line test, memory cell 
incremental test and cell test. 

Super performance 54/74F/LS/HC CMOS4000 series integrated circuits logic test. 

Can test common logic integrated circuits, test can be located to the logic gate circuit, can customize the logic vector 
table. 
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2. Software Installation 


2.1 Download and install the application software 


Download the XgproVxxxx_setup.exe file from HTTP://www.xgecu.com, and double-click the file to enter the installation interface. 
As follows: (The installation file contains the contents of this manual.) Click [Install] to start installing the application, and the 
following screen will pop up: Enter the folder where you want to install. Click [Install] to start the installation of the application 
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Click [Install], after the file is installed to the hard disk. The USB driver installation dialog box is automatically performed. As below: 


Oeics ttn Wn 
| wes Ge Welcome to the Device Driver 
-_— Installation Wizard! 


The een eins you cated the etwas dtwers the ome 
Sorpioes denSeh raped im order to work 


Té Gort cick Mepd 


EE ES mihi a = 


Completing the Device Driver 
Installation Wizard | 
| 


The deer were guccetdfuily mateled on tha comeuber 


You canincer connect pour device to this computer Fyourdeice | 
than fire | 
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2.2 Device Installation 


After the above installation is completed, connect programmer into the USB port and the operating system will discover the 
hardware as below: 


| Sarath 
| © Bae ew Ti 
LS Ee et) 


| Fea, Beh “F—=". 








Select [Auto Install Software], click [next] button, it will automatically install until the installation is successfully completed. 
(Note: In this process, the driver will change the registry. If the firewall software is installed, please release this software. Windows 
will also prompt the driver have no digital visa, confirm and continue the installation). 


If the automatic installation is not successful, you can also choose to install in <from list or specified location>, USB driver files are 





in the installation directory (D:\xgpro\drv). After installation, double-click the desktop icon 


software. Ready to use. 


2.3 Firmware FLASH Refresh 


When using at the first time or upgrading, you may need to refresh the firmware. In the main menu of the software, do a refresh 
operation as shown below (Tools-Reflash firmware): 


File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 

















00 EASA Dy) Wary 2 Gon +100 m fa ay Pasovr Bhacy {2 
Select IC IC Information(No Project opened) 
| ChipType: EEPROM ChkSum: OxOFFO 0000 
sheet Saat 7 | IC Size: 0x100000 Bytes ( 1048576 Bytes ) 

Set Interface 

@ ZIF socket © ICSP port ‘a Voc current Imax; /Default ha © io 

Address |0|1/2/3/4/5|6/7/8|9/A/B|C|D| E| F/ASCII | BT sn vcoocemer Towa 
9000-0000: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °****>** ">>> ceceuinremnes 
}000-0010: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF oe tone ee 
3000-0020: FF FF FF FF FF FF FF FF FF FF FF OFF FF FF FF OFF cos ocoos eos cnaaiee 
9900-0030: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FFE ooo oe e2 0 nj uaimhcamannaey 
9000-0040: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FFF os 00 Device 1: TLOS6II-P 
9000-0050: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF oes aa tesnassaseenne 





)000-0060: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° °° °° p> 
9900-0070: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° ngpro_t 
)000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
9900-0090: FF FF FF FF FF FF FF FF FF FF FF OFF FF FF OFF OFF O** °°": A 
3000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °°: ,} firmware> 

}900-00B0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 

)000-00CO: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 

)000-00D0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° TRE | 
9000-00E0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF OFF °° 
)000-00F0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0100: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-0110: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF OFF --*-*-*-*-***": 
9000-0120: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF oo 
)000-0130: FF FF FF FF FF FF FF FF FF FF FF OFF OFF FF FF OFF °° oo 














annan-O8iun. FE SE C&G FE FE ©C& FE fe fe FE fF G& FE CE CE CE rrr tree wens wv < 
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| File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 
| @& won Edove Duo Wax 2 a (Reap) Calculator(T) Prsour BB acy ete) 


Select IC System Self-check n(No Project opened) 
| Reflash firmware || EEPROM = ChkSum: OxOFFO 0000 











W2SXB0AL @SOICS ize:  0x100000 Bytes ( 1048576 Bytes ) 


Set Interface 
© ZIF socket ” ICSP port 0 Vee current Imax: 
Address |0|1/2/3/4/5|/6|7/8\9|A|B|C|D) E| F\ASCII 
9000-0000: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° ** sso 


Default vv} 





)000-0010: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0020: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
}000-0030: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0040: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
)000-0050: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
}000-0060: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0070: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
)000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0090: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF --***** °° 
)000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-00B0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-00CO: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-00D0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-00E0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF -******* °° 
}000-O0F0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF °° 
)000-0100: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
)000-0110: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
)000-0120: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
)000-0130: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 


3000-0140: FF_FF FF FF FF FF FF FF FF FF FF FF FF FF OFF OFF ---:----:------- 
FLASH | STATUS |..Device.Info 


If there is an error during firmware refresh, it is often because the programmer cannot be reset during the refresh and the 
programmer cannot do the refresh operation. 

The reason of error: 

It is usually caused by using an external USB hub. Please do not use an external HUB when refreshing. Please directly connect the 
programmer to the USB port of your computer to refresh. If it still cannot solve your problem, please try to restart your computer or 


do the refresh operation on another computer. 


3. Quick Start 


3.1 Hardware preparation and select the correct chip model 


Firstly, please make sure the universal programmer application software and USB driver are correctly installed. Then connect 
programmer to your PC by using USB cable. At this point, the “POW” power indicator of the programmer keeps on and the “RUN” 
indicator goes off, that means the power connection is normal and you can go to the next step. 
(If the RUN indicator blinks, that means the USB driver is installed incorrectly or don't install the USB device driver) 
Note: Please be sure to use the original USB cable. If you use HUB, make sure it is the high quality HUB and the USB voltage 
should not be lower than 4.90V. Low voltage is usually caused by using poor quality USB cable or HUB, that will make the 
programmer work unstably. 
As shown below: 

1) Click the [Select IC] button, the select Device dialog box pops up. 

2) Inthe search IC, type in the IC model (for example W29C020C) 


3) Select the correct manufactory (if there are more than one) 
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4) Select the correct model. Note: @PLCC32 @TSOP322 refer to the IC package, none: dual-in-line package 
5) Click [Select] button 
6) Note: Show that the programmer is connected 





GB Xgpro v10.75 ett 
File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 
aio Eswe 2). Wainy | CH...» (READ) +i =e i (7) P asowt _ eee a 

Select IC IC Information(No Project opened) 

ChipType: EEPROM ChkSum: O0x03FC 0000 

| “esac 000 Bytes (267144 Byes 

Set Interface 

@ ZIF socket ™ ICSI 01 Vec current Imax: [Default ~| @ Cc 








Address |0/1/2/3/4/5|6|7|8|9 | Adpe 


3000-0000: FF FF FF FF FF FF FF FF FF FF F 
Search Device Manufactory Device 


W29C020 
W29C020 BPLCC32 


W29C020 BTSOP32 


)000-0010: FF FF FF FF FF FF FF FF FF FF Fl 
)000-0020: FF FF FF FF FF FF FF FF FF FF FI 
)000-0030: FF FF FF FF FF FF FF FF FF FF FI Type “peerage 
3000-0040: FF FF FF FF FF FF FF FF FF FF Fl @ ALL ieee hicoada 4) 
3000-0050: FF FF FF FF FF FF FF FF FF FF Fl (~ ROM/FLASH/NVRAM 
J000-0060: FF FF FF FF FF FF FF FF FF FF FL = (© MCU/MPU 
j000-0070: FF FF FF FF FF FF FF FF FF FF FI ¢ PLD/GAL/CPLD 


C SRAM/NVRAM 
3000-0080: FF FF FF FF FF FF FF FF FF FF FI Cs 
(~ NAND 











000-0090: FF FF FF FF FF FF FF FF FF FF FI 
3000-0080; FF FF FF FF FF FF FF FF FF FF FI 
000-0080: FF FF FF FF FF FF FF FF FF FF FI 
}000-00C0: FF FF FF FF FF FF FF FF FF FF FI 
000-0000; FF FF FF FF FF FF FF FF FF FF FI 
}000-00E0; FF FF FF FF FF FF FF FF FF FF FI 
}000-00F0: FF FF FF FF FF FF FF FF FF FF FI 
}000-0100: FF FF FF FF FF FF FF FF FF FF FI 
}000-0110: FF FF FF FF FF FF FF FF FF FF FI © Winbond 
}000-0120: FF FF FF FF FF FF FF FF FF FF FI 


3000-0130: FF FF FF FF FF FF FF FF FF FF FI 
WINBOND IC Total: 16666 8 


3000-0140; FF _FF FF FF FF FF FF FF FF FF FI Select ‘| Cancel | 
__FLASH| Device.Info ——s 
Options IC Config Informaton 

7) Pin Detect +] Check ID A UrT-provect berore 

Erase before protect after proai 

) Verify after 1 Auto SN_N 

) Skip Blank = Addr.Re@ ALL Sec 

Ci Blank Check gyo9900¢ ->!0003FF 




















Default Programmer(1): TLO66I1I-Plus 6) 


Ready 


3.2 Read and Save 


After selecting IC in section 3.1 steps 
1) Click the [Read] button on the toolbar and pop up the Chip Read dialog box. 
) Inthe Chip Read dialog box, click the [Read] button. 
3) Read finished and then click the [Back] button. 
) Click [Save] button on the toolbar (you can also select "File-Save" in the main menu), type in the file name to save the file. 
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Be Xgpro v10.75 (an 
File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 
a Loan be save | DD reo ID scx eat cir | eam = Rain [Eghss* amy ? anour EB acy. olay fol 








Sele IC Information(No Project opened) 
W29C020C g| SINE EEPROM ChkSum: 0x03F9 B5AE 

IC Size: 0x40000 Bytes ( 262144 Bytes ) 
Set Interface 
@ ZIFsocket = © ICSP port [1 ICSP_VCC Enable Vee currentimas, Desult ly] @asit 616 Bits 

































TERT AEKRAKARATKARAKREKEKREREEASE 
Genenal Information 


1 Programmer Connected. 
KEKE KKKKKKKKKKKKKATAEAAAEEET 


Manufactor : WINBOND 
Ic Type : wzagcozo0c 
Algorithm : Flash 8Bits 
Parameter : Flash Size: 262144 bytes 











~Read Range W29C020C Location in Socket 


FLASH Slay ACIzy yy eencenee nid Ai esennene 
Adapter Information -- NONE 

















Read successful ! Save Log| 


Pins Detected Passed! 





ID: Ox DA 45 ......OK! 
Reading FLASH ...Succeeded. Time : 2609ms 
Read Finished! 














OL] ux 19 

















~Options IC Config Informaton 
Pin Detect Check ID x UIT-protect perore 
Erase before protect after progr 


Verify after [J Auto SN_N 
Skip Blank = Addr.Rz@ ALL Sec 


[C1] Blank Check jo9900¢ -2!0003FF 











cS 








Default Programmer(1): TL866II-Plus 
Ready 
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3.3 Programing a new chip 


After completing the steps in section 3.2 
1) Click [Load] button to bring up the Open File dialog box 
2) Select the data file to be written (Test.BIN) 
3) Click [Open], the file load options dialog box pops up 


BS Xgpro v10.75 
File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 





xu — -F 
LOAD bee] SAVE | BD rane Bak i (READ) a aM lige amy P sour = ela} fs 














IC Information(No Project opened) 
ChipType: EEPROM ChkSum: 0x03F9 B5AE 








@ ZIF soc *  « Xgpro > UserData © f#8R"UserData" Bits 











HR ~ Hi SFE 


Genenal Inf 





ae ei BWSR © eR (2rZ AHA 
YPe 
Parenter SU HLFER  TesTBiIN @ 2021/2/7 14:36 





3D WER 
B wun 
| ©= BH 
oO FR 
) BR 
Sm 
=. Windows (C:) 


Adapter Inf 





.~.. Data (D:) 


v< 


SHEN Al Fest. 
OL me | 


DFAS) Device 10k O 


a mabe 

















~Options IC Config Informaton 
Pin Detect Check ID = UIT-protect perore 
protect after progr 


Erase before 
Verify after [] Auto SN_N 
Skip Blank  Addr.Re@ ALL© Sec 


CI Blank Check ,99900¢ ->/0003FF 














4) According to the default settings, click [OK], at this time the file content has been loaded to the computer memory buffer. 








~File Format Load mode 


amenkage (Noml = =  —— | 
(~ INTEL HEX 

From File Start Addr(Hex): | 00000 
TO Buffer Strat Addr(HEX): | 00000 


~ Clear Buffer when loading the file 


/Clear buffer with default v | 














To Region 
(@ Detault 
(~ FLASH 


























cance _| 
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5) Click [PROG] button, the chip programming dialog box pops up. 


6) Click [Program] to get started to program the chip. If no error message appears, that means the programming succeeded. 
BS Xgpro v10.75 


File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 





= ™ — = Erase | 
Ga Loan save | eerie eens | Fan Ram [Eg "5 Jpros.. (mh Paco Fy 


s1=) 
IC Information(No Project opened) 


W29C020C rl ChipType: EEPROM ChkSum: 0x03F9 B5AE 


IC Size: 0x40000 Bytes ( 262144 Bytes ) 








Select IC 5 











- Set Interface 


@ ZIF socket  ICSP port C] SSP vASS Enable Vcc current Imax: [Default y| 











@ 8 Bits € 16 Bits 











Genenal Information 


Manufactor : WINBOND 
Ic Type : wWescozoc 
ALgorithm : Flash 8Bits 
Parameter : Flash Size: 262144 hb 























~Program reel W29C020C Location in Socket 
Start Adr: End Adr: 
Adapter Information -- NONE FLASH 00000000 0003FFFF 
Programming ...Succeeded Save Log| 


Pins Detected Passed! 





ID: Ox DA, 45 ......0K! 

Erase ...Succeeded. Time: 0.1875 

Protection Disable......OK! 

Programming FLASH ...Succeeded. Time : 219ms 
Verifing FLASH ...Succeeded. Time : 47ms 
Programming ...Succeeded 





ZIF40 

















G—e osm ] pack | 








Note: If you need to program more chips, replace the new chip and click [Program] button again to begin a new programming.When 
programming in batch, you can press [space bar] instead of mouse click. 
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4. Programmer Function Details 


4.1 Main 


Menu Summary 


Main Menu Summary 


File 
Select IC 
Project 


Device 


Tools 


Help 


Load File, Save, Find, Goto, Buffer operation, Exit 


Search and Select IC, 25 Flash Detect, Add IC by user 
Open Project, Save Project, Save Project As, Close Project, Project Attrib, Modify Password 


Read, Read ID, Verify chip, Verify, Program, Erase chip, Blank Check, Serials number, Testing, Multi 
Prog., NAND bad block check, logic IC test, TV/LCD Tools 


Calculator, System self-check, Reflash firmware 
Help, About, Update On Line 


Language switch languages, English, Chinese, Russian, Polish, German, Spanish, Portuguese, Turkish, Czech 


Right click menu Find the corresponding hexadecimal value or ASCII character string in the buffer, data, copy, paste, fill in, 


Edit buffer partially save as TXT file 





4.2 File Menu 


a9) 


| 


File(F) Select IC(S) Project(P) Device(D) 


Load File(O) Ctrl+O 
Save(S) Ctrl+S 
Copy Ctri+C 
Paste Ctrl+V 
Block Save As(S) txt 
Define Block Ctri+B 

Fill Block(F) 


Clear current buffer(C) 


Clear all buffer(A) 


Find Ctri+F a 
Find Next F3 
Goto(G) Ctrl+G : 

@ Load file: 

Loads a hex file or a binary file into the specified buffer, the GAL chip loads the file in JED format. 

@ Save file: 

Save the current buffer to HEX file in hex format or BIN file in binary format. For GAL chips, should be saved to JED 
format file. 

@ Note: For MICROCHIP microcontrollers, when loading HEX files, the HEX files generated by the MICROCHIP IDE 
development environment are loaded into all buffers. When saving, all buffers can be saved to the HEX file, and it is fully 
compatible with MICROCHIP IDE development environment. 

@ Save and open for Bin file, the default is Flash Memory + EEPROM Memory (if present) 

For MICROCHIP microcontroller, Bin saved configuration information (arranged by Microchip address) 
Can use shortcut keys or right-click in the buffer to invoke the menu functions. 
@ To get more details on Edit Function-->Edit Buffer 


10 
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4.3 Select IC 


The menu is shown below: 


ny tl 


Vs 
| File(F) Select IC(S) Project(P) Devic 
Search and Select IC(S) 

Sele 25 Flash Detect 


iow & 
' 


Add IC by user 


in 





4.3.1 Search and select IC 











~ Search Device 


———— 








Type 
(@@ ALL 
(~ ROM/FLASH/NVRAM 
(~ MCU/MPU 
(~ PLD/GAL/CPLD 
(~ SRAM/NVRAM 
(~ NAND 














MICROCHIP 


Manufactory 


GREEN-ENGINE 
GREENWICH 
GTH 

HITACHI 


IKSENICON 
INT 
INTEGRAL 


LYONTEK 

MACRONIX (MXIC} 
MAaxcon 

MAXWELL 
MICROCHIP memory 





MICRON 
MITSUBISHI 
MOSEL VITELIC 
MSHINE 

MY-MS 

MYSON 











www.XGECU.com 





PIci2cs08 @S0ICé8 
PIcizcsoéa 
PICi2zcsO08A BSOICS 
PIcizcsog 
PIcizcso09 @S0Icé 
PIcizcsog9a 
PICizcsO94 BSOICS 
PICi2zcé671 
PIC1i2c671 @DFNS 
PIcizc671 @S0IC8 
PIC1I2c672 
PIcizc672 @DFNS 
PIci2zc672 @S0ICé8 
PICi2CE516 
PIC12CE518 @SOICS 
PICi2CE519 
PIC12ZCE519 @SOICS 
PIC1I2ZCE673 
PIC12CE673 @S50IC8 
PIC1I2ZCE674 
PIC1i2ZCE674 @S50IC8 
PICi2F1622 @DIPS 
PIC12F1822 @S0IC8 
PICi2F506 
PIC1i2F508 @MSOPS 
PIci2F508 @S0ICcé 
PICi2F509 
PICi2F509 @MSOPS 
PIcizF509 @S50Icé 
PTCiwZFSiN 











Microchip Technology Incorporat 


4.3.2 Auto Detect 25 Flash 
25 Flash automatic detect, for 8-pin, 16-pin and VGA (156) HDMI serial 25 series Nor Flash, note: many chip IDs are the same and 


results have more than one, so you need to select an accurate model in the results. 





~ function description 


Select > button to automatic selection 


Only for 8/16 Pins or VGA_HDMI ISP 2Sseries large 
; capacity Flash Memory. after detecting completely, Push < 





: ,»Pin Counts or VGA_HDMI ISP 








: (* 8 Pins 
| © 16 Pins 
( VGA_HDMI ISP 








SP-16P: Place as figure 
GA: any one of port 


i | 


| 





Select | 






: Mod): ——_—_ es - | 
: Manufactory | | 





Location In Socket 


IC Total: 16666 














Cancel | 
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Cancel | 
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4.4 Project Menu 


The project file is created for better batch programming. It is a file that saves all current buffer data and working environment 
settings, including information about the current device, settings of all operation options, and settings related to auto serials 
number. It is convenient to use in daily mass production. The project can be set up with password protection, which can protect the 
security of the product program to a certain extent. The menu is shown below: 


tT 
i) 





| 
File(F) Select IC(S) Project(P) Device(D) Tools(V) 
Bow Kew 2. Open Project(O) 





Select IC Save Project(B) 
Save Project As(S) 
| Close Project(C) 
Set Interface Project attrib(A) 
@ ZIF socket Modify Password(K) 


Save Project 
After setting the required parameters of the chip in the application, select [Project] - [Save-Project], that is, a project is created. 
And the project information is displayed in the information area of the window. Click [Save Project], type in the project name and 


click OK, then the following project dialog box pops up. 








~Basic Information 


File PATH: [D:\Xgpro\UserData 
Project Name: | test 
Device Type: | W29C020C 


ProjectDes: test 
CRC 32bits:| Ox 7F7445B6 
Create Time: | 2021-02-08 15:28 Modi: | 2021-02-08 15:28 
Password length<8: [eeeennne 
Confirm password: | 











[_] Protected Cancel | 


1) Password can be empty, that means the current project is not set with password protection. 
2) If the project is set to protection mode, the password must be input. When the option "Protected" is checked, the relevant data 
of the project will not be changed. Some functions of the programmer are disabled. 


Project is Encrypted! 


Input PASS: | 
Cancel _| 
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Open project 

Open a current project, select [Project] - [Open Project], select the project name in the window and click OK. If the project has been 
set password, the following dialog box will pop up. (If no password is set, the project will be opened directly) 

Save project As 

Save the current project as another project name. Refer to the operation of [Save Project]. 

Close Project 

Close the current project. Switch to normal programming mode, close project and clear data in the current buffer. 

Project Attrib. 

Select [Project] - [Project Attrib] to bring up the project attribute dialog box. The project attribute dialog box can change the project 
description and project protection mode. You need to input the project password when saving. 





~Basic Information 


File PATH: [D:\Xgpro\UserData 


Project Name: test 


Device Type: | W29C020C 


Project Desc: test 


CRC 32bits: | Ox 7F7445B6 
Create Time: | 2021-02-08 15:28 Modi: | 2021-02-08 15:28 








Protected 





Modify Password 
Reset project password 


afe af of fs ae af oft of 

Old Password: | 
New password: | ee 
Confirm password: | ereeeeey 


cmeel | 


Accurate engineering descriptions can distinguish from a large number of projects. Engineering models are generally 
used for mass production. 


The project file has been encrypted to a certain extent, so the project password can be protected to prevent the project 


file from being copied. To a certain extent, it can protect the data. 
When saving or opening project files, all contain 32-bit CRC check information, which avoid corrupting storage files or 
other uncertainties. 
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4.5 Device Menu 


This menu function is the programming operation of the chips, please see section 4.10 Programmer operation function for details 


The menu is shown below: 


Device(D) Tools(V) Help(H) Langu 
; Read...(R) J 
- Read ID(I) i 

Verify (V) 

Program(P) 

Erase (E) 

Blank Check(B) 


Serials Number 
Testing 


Multi Prog. 

NAND Bad Block Check 
Logic IC Test 

TV/LCD Tools 


4.6 Tools Menu 


The menu is shown below: 


Tools(V) Help(H) Language(| 
Calculator(T) 
System Self-check 


Reflash firmware 


4.6.1 Calculator 


This is a calculator that comes with Windows system and it is convenient for calculating various formats when switching to scientific 


mode. 


4.6.2 Self-check programmer hardware. 


Note: Before self-checking, please remove the IC and ICSP connecting wires on the ZIF socket, the programmer will apply VPP, 
VCC, GND to all pins for testing in self check. And test the internal short-circuit over current (apply VPP VCC and GND on each pin 
at the same time). If the IC is on the ZIF socket, may damage the IC. After the test is completed, the test condition of each power 


supply is displayed in the dialog box. 


14 


Xgpro Software User Guide —T56/TL866ll 


4.6.3 self-check on TL866ll Plus 





Self-Check Test Result 





Test VCC short protection... 
VCC----------- short protecion OK 

Test VPP short protection... 
VPP----------- short protecion OK 











lf-Check Result Normal 





Test | 


4.6.4 self-check on T56 


Self-diagnasis 


PIN ¥YCC YPP GND 


eo oe 2 om om & we 


=“ ££ ££ ££ ££ £ ££ ££ £ £€ £ £ ££ ££ £ ££ ££ ££ ££ ££ ££ ££ 4 o€ 
=. ££ ££ ££ ££ £ £ £ £ £ ff £ ££ £ f £ ff ff ff ff ££ £ fo 
“ ££ ££ ££ ££ ££ ££ ££ £ € £ £ ££ ££ ££ ££ ££ ££ ££ ££ ££ ££ fo € 
<< £ £ ££ £ £ £ ££ £ £ £ ££ ££ £ £ ££ ££ ££ £ £ £ £ ££ 


UIT 


Cancel | 


PIN ¥CC YPP GND 


43 
4? 
46 
45 
44 
43 
4? 
4] 
40 
34 
38 
af 
36 
35 
34 
33 
je 
31 
30 
24 
2d 
of 
26 
245 


. ££ ££ f£ ££ £ £ £ £ £ f £ f£ ££ ff ££ ££ ££ ££ ££ £ £ fo 
“ £ ££ ££ ££ ££ ££ £ ££ £€ ££ ££ £ ££ ££ £ £ £ ££ £ ££ ££ ££ € 
. f£ ££ ££ ££ ££ £ £ £ £ f £ ff £ ff ff ff ff ff f£ ££ £ fo 
“ £ ff ££ ££ ££ ££ £ ££ £ £ ££ ££ ££ ££ ££ ££ ££ ££ ££ ££ 4 


| 
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PIN YCC YPP GND 10 


J 
J? 
J3 
JA 
J5 
J6 
Jf 
Jd 


“ f£ ff ££ ££ £ fot 
s f£ ££ f£ £ £ f ot 
. £ ££ ££ £ £ £ 4 


POW[4.8¥-5.5¥): 
IO 3.34: 

VCC 3.39: 

VPP 12¥: 

¥CC Imax PROT: 
¥PP Imax PROT: 


Diagnosis Result: 


| Normal 


———e6ereeurrom — CO eS SS 
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4.6.5 Reflash firmware 


Reflash the firmware of the programmer hardware. The application is upgraded to a new version. 
If the program in FLASH needs to be upgraded and reflashed, the application will prompt for a firmware reflash. If no refresh is 


needed, the reflash function is disabled. 








_ Please reflash firmware. Select: <main menu>--<tools>--<Reflash 
\ firrmware> 


Click <Tools-Reflash firmware> to bring up the following dialog box: 





Attention: Please carry on this upgrade operation on the 
: computer reliably, and guaranteed that computer's power supply, 
A and closes all other application software. In the hardware 
y_ \ upgrade process , If the computer to halt or the system power 
failure restarts that possibly damages the programmer. 


APP Version: V10.75 
Hardware Type: TLS866II-Plus 
Current Firmware V04.2.123 


Click <Reflash> to upgrade... 


Cancel | 


























Click <Reflash> button to start, the total reflashing time is about 15 seconds. Click <Cancel> to quit reflashing. 


Note: 
1. Please do not use an external USB hub when reflashing. Please directly connect the programmer to the USB port of your 
computer. Using an external hub may not allow the reset upgrade. 





2. Close other programs and make sure the power supply of computer is reliable! 
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4.7 Edit buffer 


The programmer software can modify the contents in the buffer, the common functions as below: 


4.7.1 


Define Block 
Fill Block 

Copy 

Block Save As 
Clear buffer 
Find 

Find Next 
GOTO address 


Define Block 


There are two ways to define block: 


www.XGECU.com 


The first way is: Press the left mouse button in the buffer, move the mouse to select a piece of data and then press the right mouse 


button, the following menu appears as below: 







3000-0000: 
3000-0010: 
3000-0020: 
3000-0030: 
3600-0040: 
3600-6050: 
3000-0060: 
3000-0070: 
3000-0080: 
3800-0090: 
3J000-O0AG: 
J000-O0B0: 
3000-00CO: 
3000-00D0: 
3000-O0E6: 
3000-O0FO: 
3600-60160: 
3000-0110: 
3000-0120: 
3000-0130: 
3000-0140: 


60 
61 
60 
60 
FE 
FE 


FE 
FE 


FE 
FE 
60 
60 
60 


68 60 00 
66 66 OD 66 60 66 
66 90 03 66 BO 90 
66 00 98 66 00 66 
66 80 91 66 00 66 
Pe| Pe| Fe) Fe) FG) Fe 
Fe) Fe Fe! Pe) Fe Pe 
FE FE FE FE FE FE 
FE| Fe) Fe FE Fe! Fe 
FE FE FE FE FE FE 
FE FE FE FE FE FE 
FE FE FE FE FE FE 
FE FE Fe! FE) FE) FE 
66 88 98 GO 00 86 
66 66 60 68 OO 00 
66 88 98 GO OO OO 
66 88 98 GO 00 OO 


58 
6D 
6E 
66 
31 
FE 
FE 
re 
FE 
FE 
FE 
FE 
FE 
60 
60 
698 
60 


nu“ mH Hh ) % 


oo. fF 8 ® 
o oc 8 8 © 


“eee eee eee eeennne 


86 60 | a ee 
60 60 6... Ciggmacmeman 
@0 06 H-- eee e eee eeee 
Copy 
Paste 
Block Save As(S) 
Define Block 
Fill Block(F) 


Clear current buffer(C) 
Clear all buffer(A) 
Find 

Find Next 

Goto(G) 


Ctrl+C 
Ctrl+V 

txt 
Ctri+B 


Ctrl+F 
F3 
Ctrl+G 


|| 


The second way is: in the main menu, click [File] button to select [Define Block], or directly press the shortcut key "CTRL + B" to 


bring up the following dialog box, type in the start address and end address, and press OK to complete the "Define Block". 





Subsequent block operations can be done on the defined data blocks. 


Start Addr: lo 


End Addr: 0 


Cancel | 


Copy block, Fill block, Block save as TXT file 
4.7.2 Fill block 
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“Fill block” is to replace all the data of a continuous address in the program code buffer with a fixed value. Right mouse click to 


bring up [right click menu], and select [Fill Block], the following dialog box pops up: 


Region 
@ FLASH 


Stard_Addr: 0x |90000059 


End Addr: Qx |0000007F 0000007F 


~—-Value(HEX): | Fr IC 


~Format 
@ BYTE © WORD C Tri byte © DWORD ( Random 


camel | [) 





A. Buffer Region, the default value is the buffer displayed in the current window. 

B. The start address and end address of the block to be filled. The default value is from the start to the end of the defined 
data block if a block is defined. If no block is defined, it is the full region of the current buffer. 

C. Fill value, the maximum allowed is 4 bytes. If the fill format is random, the value is irrelevant. 

D. Filling format, default format: If the chip is programmed by 8-bit mode, the default is single-byte mode. If the chip is 


programmed by 16-bit mode, it is double-byte mode, you can change the filling format you want. 


4.7.3 Copy 


After defining block, right mouse click to bring up [right click menu] and select [Copy], then the content of the block has been copied 
to the clipboard of WINDOWS. You can also directly press shortcut key "CTRL+C" to finish copying. 
Copy data from area A to area B as below: 





HoGGGO: | FF: FF| FF) FF: FF: FF: OFF; OFF. OFF: OFF FF FE FF: FE: FS OFF: ww es 


Hageid: OF 7 AB Ef B£ 88 7H 7C FR DE SE DG AY 20 SD BF ......8] +H... ]- 
Hawes: | 6DlhUR UF U8 UFO Uf OD 645 651 lh 6 CU 6 CUD OB Om LL WE. z 
Hoa: fh #o PH CH SF th FF 9 Oh OF BH 8G AS CE OPA ~rest WED, 6.4. 
ABA A “2B 23 54 9S CF Ot ee oP 6 6 8 OO A (8g. AE: «OL 
AnaOsO: | SR Tey 9H Fe tz FF SY 85 FF: FF| FF: FF: FF OFF iaeee . 7 
Boo060: FF) FF FF SE FF| FF) OFF: FF: FF: FF OFF) FE! OFF: FF: OFF a iois PEGS agi es 
OOO870: FF: FF: FF fn, FF FF FF: FF: FF: FF: FF (aye PE. FR OFF: cna anne a ane aes 
gogee: FE FE: FF A tr Er il EE i EE FF 4,-/FFO OFF) OFF OFF... s. esse eee enee 
OognoH- FF: FF: FE: FF FF FFF: FE FRE: EF FF... ...........-- 
HOeGwh: FF FF FF: FF ert ae A af = WE Ad. 7s: 7G FR PR AR]... -..---- ot} .+H 

UN GTNEH T = oy Dt FS 38 ae Al AD: SE: 54) 93 ij. O, HS 
agaacd: DA 8 0 COF 86 77 45 2A Oe BB)... . Zuaeit.WE® 
ooeeDD: BA: 28 29°57: 95) CC bt Bo A C.9..€80....34a 
OGGGEG: | OC Bf BC A? A Se 18) Oo 98 78 12) FF So BS] FF BL{...p.w¥ 
woaer@: | FEF: EF. FF| FE: Ff. FF | FE, Ff | FF! FF. EF, FF: FE FF. FEF FF... .....-...-.-- | 





Note: In order to enhance the speed of pasting, the data format of clipboard is a special binary format for this programmer. So other 
WINDOW applications cannot directly use the data copied to the clipboard by this program. If you want to copy the data block to 
other applications, please use the [Block Save As] TXT file function. 

Block Save As 

You can output the defined data block as a TXT text file, that is convenient for designers to apply when programming. The text 
format is automatically arranged in 16-bit or 8-bit way. Operation method: After defining block, click the right mouse button to bring 
up the [right click menu] and select [Save Block As]. 


4.7.4 Clear Buffer 
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Clear Current Buffer: clear the buffer displayed in the current window of the application. 

Clear all buffers: clear all buffers of the chip with default values. 

Find, Find Next 

Function: Find the HEX or ASCII string in the current buffer. 

Operation: Press shortcut key “CTRL+F” or click the [Find] in the right-click menu, the following dialog box pops up: 


oe 


-Format | Cancel | 


@ HEX C ASCII 











Type in the HEX value or ASCII string you want to find, and finally click the "Find" button in the dialog box. When there is a 
matching hexadecimal data or string in the program code buffer, the cursor will be located to the address of the first matching 
content and press F3 to continue finding the next one until the buffer is completely searched. 


4.7.5 Goto address 


Function: Move the cursor to the address specified in the current buffer. 
Operation: Press shortcut key "CTRL+G", or press the right mouse button to bring up the menu and select [Goto], then the 
following dialog box pops up: 


Goto Address Ox: 





Type in the address, click OK button and the cursor will move to the address. 


4.8 Options 


Options of programming setting are shown below. You can set the options 
Use default setting for mass production , don't need to modify. 





ee Sha 


Options _ IC Config Informaton 
Pin Detect Check ID i. UIT-protect perore 
Frase before protect after progr 


Verify after [J Auto SN_N 
Skip Blank = Addr.Re@ ALL© Sec 


LI Blank Check g99900¢ ->!0003FF 
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4.8.1 Pin Detect 


Before operating, the software automatically checks if the chip pins are in good contact. It can avoid programming or reading errors 


caused by poor pin contact in most cases. 


Special case of pin poor contact 


Because of pin severe oxidation, some individual pins may not be completely disconnected, (for example, it is equivalent to a 


contact of 3-10K resistance). In this case it is not possible to detect if the contact is good, and errors may occur during 


programming. So for old chips, the pins should be handled carefully. 





For very few chips, the pin detect may fail. You can temporarily uncheck this option "Pin Detect" while ensuring that the pin contact 


is good. In that case, no pin detection will be performed before reading or writing. 


4.8.2 Erase before (programming) 


Erase the entire contents of the chip before programming 

Some chips do not have erase function, this option will be disabled, for example: most 27Cxxx chips are one time OTP ROM or 
UVROM. These chips are not erasable or do not have the electrical erase function. 

For 24 series, 25 series, EEPROM 99 series chips, this function is also disabled when there is no special erase command. That 
means these chips do not need to be erased and can be rewritten directly. (If you must erase the data of the chip, you can write 
OxFF into the entire memory of the chip) 


4.8.3 Verify after (programming) 
4.8.4 Skip Blank 


The write operation will be skipped for FF data blocks, that can greatly improve the programming efficiency. When this option is 


checked, the verify operation will also be skipped. 


4.8.5 Check ID 


Many chips have an internal identification mark, the content of which is generally composed of two or more bytes: generally, the 
first byte is the Manufacture ID, followed by the chip type or chip capacity. Different chips have different IDs, this option can prevent 
incorrect chips put on. This option is to check the chip ID before reading or writing. If it is correct, continue; if incorrect, stop. This 
function is optional. The option is enabled by default. 


For chips of the same type, they have different manufacturers, but may be programmed in the same way. Therefore, for chips 


that are not in the support list, you can select other manufacturers of similar model chips with the same capacity for 





programming. Because the ID is different, before programming, just uncheck this option [Check ID}). 


4.8.6 Address range 


You can set the address range of the programming chip, that can improve the efficiency when mass production. 


4.8.7 Blank Check (before programming) 


Except for the 27 series UVROM, generally it is not necessary to check this option. 


4.8.8 Auto SN_N 


Refer to section 4.10.7 Setting the Serials number 
4.9 Select IC 
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Click <Select IC> button in the upper left corner of the software interface 


tae LAD Ned save SO s010 AD sec a ie 1) Pe Fann 
Select IC - ~IC Information(No Project opened) - 






ChkSum: 0x0041 BEOO 


ChipType: MCUs/MPU 
ATMEGALGA OOO, | FF “resze:_Ons000oytes (16908 Bytes) + 1200 oytes 


sada click select IC button 
Search Device 1 | Marufactory ~ Device : uss 
_ | ATMEGA16A | | 












( PLD/GAL/CPLD 
( SRAM/NVRAM 





ATMEGA1694 























‘|ATMEGA164 @TOFP44 


Type * ATHNEGA162 BOFN44 
ATMEGA164A @DIP40 
(* ALL ATMEGAI64A @TOFP44 
C ROM/FLASH ATMEGA164i @OFN44 
Aachen Manfactory ATMEGA164PA BDIP40 


ATMEGAI64Pa @TOFP44 
ATMEGAI64PA @OFN44 
ATMEGA165& G@TOFP64 


MAND ATMEGA165PA @TOFP64 
Senne. ATMEGA1688 @DIP28 

ATMEGA168A @TOFP32 
C YGA/HDMI 


ATMEGA1684 @MLF32 
ATMEGAI68PA @DIP28 
Jenter IC name t¢Peasceiigter' 
@TOFP64 


ATMEGAI69PA @TOFP64 


www.XGECU.com 


RAM Bw (Ml) @ apour 





« IC model 











Atmel Corporation IC Total: 26022 





Select | Cancel | 


When selecting, the package of chip must be right. Sometimes, different packages of chips have different pin definitions. For the 


same type of IC, (none Package is DIP package chips.) 


if the specific package is not listed, just check the IC data sheet and directly connect the corresponding pins to program. 


4.10Programmer operation function 
4.10.1 Read 


Read means reading out the data from the chip into the buffer. The reading window may be different from different models of chips. 
for example, the chip ATMEGA16L, click [Read] button in the toolbar and the following dialog box pops up: 





X = 
| ca) ¥ an (ig Grog) ty 
no Deer pra eure | Fan RAM [2 PROG. P ape 
| Chip Read APP Version: 10.75 l 
i =a — z: 
4 / Read Range | ATMEGAT6A + Location in Socket - 
7 |v FLASH SPAY _ Sneine EndAdr: -....--- 
| EEPROM 
| IV Config 4 
_ | LOCK Bit r 








| Read successfil ! Save Log 


Pins Detected Passed! 





Reading FLASH ...Succeeded. Time : 157ms 
Reading EEPROM ...Succeeded. Time : Oms 
Reading Config ...succeeded. Time : 16ms 
Read Lock bits ............ Elapsed time: 15ms 
Read Finished! 





Read BACK | 


First of all, set the [Read Range], which includes [FLASH] [EEPROM] [Config.] [LOCK Bit]. 





ZIFAB 





do reading operation on the entire 


chip. Click [Read] button to start reading the data of chip, note: if the chip is encrypted, the read data is invalid. 
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(for ATMEGA, [LOCK Bit bytes] in config, the datas are readable whether be encrypted or not.) After reading, the reading time 
of the individual buffers is displayed in the information list box. 

Note: generally, the read operation will not report an error. If you want to verify whether the read data is correct, you can use the 
[Verify] function. Please see the verification instruction for more details. The chip ID value will be checked by default before 
operation. 


4.10.2 Program 
Load the data file to program chip 


Click [PROG.] button in the toolbar, the chip program dialog box pops up as below: 
Take W29C020 as an example, 


Normal programming is shown below: 











Program Range — W29C020 _ Location in Socket 
FLASH Start Adr: 90000000 End Adr: Q003FFFF 











Programming ...Succeeded Save Log| 


Pins Detected Passed! 





ID: Ox DA 45 ...... OK! 

Erase ...Succeeded. Time: 0.2035 

Protection Disable......OK! 

Programming FLASH ...Succeeded. Time : 187ms 
Verifing FLASH ...Succeeded. Time : 47ms 
Programming ...Succeeded 














BACK 


@ For most of the chips, the programmer will automatically verify during the programming process. Will stop immediately if 
an error is found. 


@ = If the option [Auto SN_N] is checked, the chip number in the buffer will be automatically incremented according to the 
setting after programming. 


To ensure the correctness of programming data, it is advisable to check the option [Verify after]. 


4.10.3 Erase 


For the electrically erasable chip, click [Erase] button in the toolbar to bring up the following dialog box: 
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Erase Range Location in Socket 
DET: w29C020 

















Erase ...Succeeded Save Log| 





Pins Detected Passed! 

ID: Ox DA 45 ...... OK! 

Erase ...Succeeded. Time : 0.2035 
Erase ...Succeeded 














BACK 


The option [Check ID] is checked by default. For few parts of microcontrollers, some chips while it be encrypted and the ID cannot 





be read out. In that case, please uncheck the option [Check ID], otherwise ID Error will be displayed. Click [Erase] button in the 
dialog box, after the erase succeeded, the erasing time is displayed. 


4.10.4 Blank Check 

Click [Check Blank] button in the dialog box to start the check blank operation. When it is finished, the elapsed time is displayed. 
You can select the region of the chip before checking, all region is by default. If the chip is found to be non-empty during the blank 
check, will stop operation and the address and stored value of the non-empty area will be displayed. 


4.10.5 Verify 


You can select the region of the chip before verifying, all region is by default. Click [Verify] button in the dialog box to start the 
operation. If all the data are the same, the elapsed time is displayed when verify finished. 
If the chip datas are found to be different during verifying, the following dialog box will pop up: 


Memory Area: CODE MEMORY 
t= Address: 0x 0000 0000 
alm Buffer Value: 0x FF 

Chip Value: 0x 00 


Verify to All | Cancel | 


Click [Continue]: The same dialog box will pop up again if there are still differences. 





Click [Verify to all]: It will compare all the contents of the chip, and prompt will pop up if differences are found during the comparison 
process, until it is finished. It will prompt how many differences and show the different cells in red font in the buffer (except NAND) , 
as shown below: 


Click [BACK]: It will exit directly without the later verifying. 
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Address |0/1/2/3/4/5/6/7/8/9/A|BIC|DIE|FIASCH A lessssssesssstttnessssssenenees 
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 


3000-0000: FF FF FF 1 Programmer Connected. 


HKATKKKTATKKTATKHTTATKTTKAHETTHTTAT 








Se ee ee ae ee eee ee 


9000-0010: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
9000-0020: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-0030: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF| _ Verify Range — eked ee Location in Socket 
3000-0040: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FLASH EEE PUG GEE | SES 











3000-0050: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-0060: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 








)000-0070: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Verify Result(differencequantity): 20 Save Log| 


3000-0090: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 











Pins Detected Passed! 


ID: Ox DA 45 .....OK! 
JOOO-OOAG: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Iveriting FLASH .. Succeeded. Time : 4578ms 


3000-0080: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-00C0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-00D0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
}000-O0E0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-O0F0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 





3000-0100: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
3000-0110: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 








3000-0120: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 


3000-0130: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Issa | 











4.10.6 IC Config. 


Click [Config.] button, the interface is as below ( select IC model: PIC18F 4555): 





File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 
eon Bsa 2D Wasere > a +a AM ure my P xvowr cy i 
Select IC IC Information(No Project opened) 
a ChipType: MCU/MPU ChkSum: 0x0060 9F00 
IC Size: 0x6000 Bytes ( 24576 Bytes ) + 0x100 Bytes 











Set Interface 
=e “7 Enal Default 9 Rie Ris 

@ ZIF socket © ICSP port 0 i »P VCC Enable Vee current Imax: @S8 Bits € 16 Bits 

B76 BITS =A —ssBIT3, Ss BT2_—sBIT1_—séBITO BE ccudecccskvavavsasuuanecersossensunentecson 
0xX300000: | USBDIVIY| CPUDTV | CPUDIVIW| PLLDIV|~| PLLDIV| PLLDIV 1 Progr r Connected. 
0x300001: | IESO IW | FCKEN ii Foscs || | Fosc2 |i Fosci1 || |FOScO = i is—<(it I la cernrrenerrnrrenerennrenarenarreneesnerens 
0xX300002: IV | VREGEN| | BORVi | | BORVO | | BORENi] | BORENO! | /PURTE Device 1: TLA66II-Plus Ver: 04.02.124 
0X300003: | | wptess| | woTPs2] | upTPsi] | wpTPsO] | WDTEN USB SPEED MODE: FS i2MEZ 
OX30000$s 6 lee rere eereeereseresereeerresrrssrreseress: 
ox300005: | | MCLRE | LPTios| | PBapEN| | ccP2zmx 
Ox300006: | | /DEBUG|W| xINST | ICPRT 1 | uve | | STVERN PICIOF445S5 #DIPS0 
0X300007: Nemory Size : Oxo0006000 
0X300006: 1 | cp2 1 | cpa 1 | ceo 
ox300009: | | CPD 1 | CPB 
OxX3 00004: 1 | wnT2 | | wRTa | | WRTO 
oxjo0008: | | uRTD | | wRTB | | wRTC 
ox30000C: 1 | estR2 | | ZBTR1 | | EBTRO 
ox30000D: | | ZBTRB 


7. Sh VT Rit BI2H'0' 
















IC Config Informaton 


Options 
WELG: (Ux 3U0000-0x30001 


lv) Pin Detect ) Check ID 
] Erase before 

M] Verify after DC) AutoSN.N —«-_—-_—_— I | amen nenenn ene encnnenennnnns 
] Skip Blank Addr.Rz@ ALLO Sec 00 05 1F 1F 00 83 85 
C1] Blank Check goq000¢ ->l00005F 00 OF CO OF E0 OF 40 
Note:Checked = 0 









USERID: | FFFFFFFFFFFFFFFF 


The value of the config information in the red circle corresponds to the config interface: click on the config interface, the value in 
the config information will change automatically. The config information varies from chip to chip, so please check the chip's data 


sheet at first, and configure IC correctly according to your specific needs.IC config, need to understand the role of each bit in the 


configuration bits 
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4.10.7 Serials number 


The chip number setting function is to automatically add a number to a certain memory area of the chip during programming, that 
can easily program the chip at the factory. You can add time or unique serial numbers and so on, also can use a variety of 


numbering algorithms. Click <Device>--<Serials Number> in main menu to bring up the following dialog box: 


AutoInc. mode Operations 
pal scales o0000000 SN Lenath: | 08 


(@ Default INC. Ses eat 18100073 

(~ Time Mode Ine Step(10): 

= CODE Inc.Format 

(~ Radom (@ HEX ( ascll | (@ HEX ( DEC 


(~ User Define [_] Ime.from high address 


Region 
(@ FLASH 


Record: ‘e| 


Note: Save Serials to end of this file 


Enable Auto.SN Test Cancel | 


Firstly, select the automatic numbering algorithm, there are four modes in the dialog box. And then introduce the every mode 





separately as below: 


410.7.1 Default INC. (Default Incremental Algorithm) 


The setting interface of this algorithm is shown above. The function of this algorithm is to put a number of set length at the place 
where the set storage area of the start address, and the number increases according to step length at a time. After setting the 
parameters, you can click <Test> button to test and see the change rule under various parameter settings. 

The initial value and step length of the number can be set in the dialog box. 

After setting the parameters and testing them well, set the record file. If it is empty, the record file is invalid and the data will not be 
recorded into the file when programming. If the record file is set, the number you set will be added to the end of the record file after 
each programming. 


Finally, check the option <Enable Auto.SN> and click<Save> button. 


4.10.7.2 Time Mode (algorithm) 


The interface of the Time Mode dialog box is as below: 


at 0x2000, a time data is put in 
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AutoInc. mode i oo eee 
otal Aqgariux Length: 
( Default INC. een as 


Inc Step(10); 
(@ Time Mode ee 


(@ YYYY-MM-DD 00:00 
¢~ Radom (~~ YY¥¥Y-MM-DD +5 bytes INC. 
(~ ¥Y¥¥-MM-DD 00:00+8 bytes INC. 








(~ User Define (~ YYYY-MM-DD 00:00+16 bytes Radom 





Region —— 
(@ FLASH 
(~ DATA 


ISER.ROW 
C USER.R Record: | ‘| 


( USERID _ Note: Save Serials to end of this file 


Enable Auto.SN Test | Cancel | 


There are four types of time encoding formats, which are as below: 














(1) Date + time Total length of number: 16bytes 
The date and time are added at the specified location during programming, the total length is 16bytes. 
(2) Date + 5 bytes increment Total length of number: 16 bytes 
The increment part can set the initial value and step length. 
(3) Date + time + 8 bytes increment Total number length: 24 bytes 
The increment part can set the initial value and step length. 
(4) Date + time + 16 bytes of random numbering Total length of numbering: 32 bytes 
16 bytes are randomly generated bytes, which can generate a unique serial number of product. In this way, the record file must be 
set so that the generated code is recorded in the file. Otherwise, you don't know what the product number is. 
The next steps are the same as above <Default Incremental Algorithm> 


4.10.7.3 Random (Random number algorithm) 


The algorithm generates a random number of the specified length, as below: 16 bytes of random data are placed at the start 
address 0x2000 












































AutoInc. mode , Op erations 
(~ Default INC. Start AddrOx | 00002000 Hae 16 | 
(~ Time Mode 
CODE 
(e Radom (@ HEX ( ascl 
(~ User Define 
~Region 
(¢@ FLASH 
() DATA 
ISFR R HN 
(~ USER.RO\ Recon | e| 
C USERID Note: Save Serials to end of this file 
Enable Auto.SN Test | Cancel | 


4.10.7.4 User Define algorithm 


The user-defined algorithm is very flexible, you can set any numbering algorithm, see the catalog for details about how to use it. 
\\Serialnumber\source_dll in the VC++ source program for detailed instruction. The interface is as below: 
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AutoInc. mode 
User algorithm |EAsiose et eee 
(~ Default INC. Note:Copy the file to '\SERIALNUMBER 
= Algonthm Desenption 
(~ Time Mode [DEVICE] 
Xingong TL866II DLL Test 
é Radom [Desenption] ; - 
PICLSF45S0R5E 8¢ FSI liz 
ak 2018-01-11 
(e User Define 


original vahue: 18100073 


Region 


Record: e| 


Note: Save Serials to end of this file 


Enable Auto.SN Test Save | Cancel | 


The RC correction byte encryption method for AVR microcontrollers is implemented entirely by calling the DLL dynamic library here. 








... \TAMEGA_LED directory contains all the source programs and test methods. After making the DLL file, you just need to copy it 
to the application directory of ... \\Serialnumber subdirectory. When setting, choose the algorithm file you made in the user algorithm 
file list. The following steps are the same as the other algorithms. 
Important Notes: 

1) After setting the above content, the programmer will not automatically add the number you set to the chip when 
programming. If need to automatically add the number, you must check the option [Auto SN_N] in the main interface. 

2) In the main interface, the condition that you can check the option [Auto SN_N] is that you must firstly set the numbering 
algorithm and check the option [Enable Auto.SN] in the set auto serials dialog box. 

3) After checking the option [Auto SN_N] in the main interface, if you reset the numbering algorithm, the option [Auto SN_N] 
must be re-checked in the main interface. 

4) If IC model is changed, you must reset the numbering algorithm. 

5) In the engineering mode, the algorithm is saved in the project file. You can directly open the project file and automatically 
transfer to the automatic numbering algorithm. Therefore, it is generally used in the project mode for mass production, it is simple 


and convenient. 


4.11ICSP Programming 


For chips that can be in-circuit programmed serially, the programmer can program the chips on the target board through the unique 
ICSP interface. Before programming, check the option [ICSP port] in the main interface, at this time the option [ICSP_VCC_Enable] 
becomes available. The option [ICSP_VCC_Enable] is checked by default, that means the programmer provides VCC power to the 
target board. Please note: a maximum current that VCC power supply of programmer can provide is 120ma. If the target board 
needs a larger power supply, please use the power supply from target board itself. 

If you do not need power supply from programmer, you can uncheck the option [ICSP_VCC_Enable]. In this case, there will be no 


VCC power on VCC pins when programming. It is shown as below: 
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File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 





: = 
> vox bed save P10 Dame ole ee [ReaD] | Him Rais gree amy ? apour BB cy 


W25Q32BV g 


~ Set Interface 
( ZIF socket 


| Address |0|1|2/3/4/5/6|7/8|9/A/B/C/D| Ee] F/ASCH 


3000-0000: 


Select IC 













3000-0010: 
3000-0020: 
3000-0030: 
3000-0040: 
3000-0050: 
3000-0060: 
3000-0070: 
3000-0080: 
3000-0090: 
}000-00A0: 
}000-00B0: 
3000-00CO: 
JO00-O0DO: 
3JO00-O0EO: 
J000-O0FO: 
3000-0100: 
3000-0110: 
3000-0120: 
3000-0130: 
3000-0140: 


FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 
FF 








i> 


IC Information(No Project opened) 
ChipType: EEPROM ChkSum: 0x3FCO 0000 
IC Size: 0x400000 Bytes ( 4194304 Bytes ) 













@ ICSP port ICSP_VCC Enable 


























Vcc current Imax: [Default | 










@ 8 Bits € 16 Bits 



































F 
F 

F Read Scope! W250Q32BV ~Location in Socket 

F FLASH statAdr 9 <....... Brig UAGin yy eessese= ———— 

F \¥] STATUS REG —_ 

: 123456 

i 6 SCK 

F Supply Vcc Power to Board 5 MISO(30P Cap.) 

F | Connect <ICSP> to target board, Click-<Read>-Button Save Log | ; ee : | 

Fe Soe er ars ee, ice 

F Connect a 30P Capacitor @Pin MISO 
F 

F 

ra 

F 

F 

F 

F SS 

Foe ve w+ Pivinencse Conmecton I. Read, 1 Rack | 

FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Oo 


FF OFF FF FF OFF FF FF OFF FF OFF OFF OFF OFF OFF OFROcc* css 
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Next, Read, Erase, Verify, and Program operations will work through the ICSP port. For TL866Il, please don't put the chip on the 


40PIN universal ZIF socket during operation. The universal ZIF socket of T56 is independent of the ISP port. 


Click [Read] button in the toolbar, the following dialog box pops up as below (Please note: the dialog box for read, erase, verify and 


other operations is the same as write operation): 


On the right side, the ICSP port wiring schematic is displayed. For more details, you can click [View ICSP Connection] button. 


a 8 a ee oe ee _ Le _  _.._ Ee. 


\Chip Read APP Version: 10.75 


A 30P Capacitor can be connected at PIN MISO 
to improve ISP programming stability 


| KGecu greF 


In-Circuit SerialProgramming connection 
SPI FLASH 44a F2 #2 2 EI 





FOR 25 SPI Nor Flash 


ICSP supports the following chips: 


1) 24 series 25 series 93 series 
2) ATMEL89S51, 52, AVR ATMEGA full series, Note: In parallel for high-voltage programming, ISP for low-voltage 

programming 
3) MICROCHIP PIC10Fxxx 12Fxxx 16F xxx 18F xxx full series. 
4) SYNCMOS SM59Dxx SM59Rxx full series 
5) SPI NAND, EMMC, VGA_HDMI 


4.12Multi Programming 
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The software support simultaneously working with 4 Programmers on each computer. For USB expansion, please use a high- 


quality USB hub with power supply. Multi programming interface is as below. The automatic numbering function can be used 


normally when multi programming. 


























Multi. Prog. Please use HUB with Power 0 
-Programming Option——— — 
FLASH 
STATUS REG. 
IC: W25Q32BV Interface: ICSP 
Device 1 -—- TL866II-Plus Device 3 








Device 4 


Device 2 


Prog. [ X ] Prog. [ Cc ] | Prog. [ V ] | 


You can use the shortcut keys [Z] [X] [C] [V] to start the corresponding programmer when multi programming. 











4.13RAM Testing 


After selecting the corresponding model of RAM chip, click [Device] - [Testing] button in the toolbar, the following dialog box pops 


up. TL866II supports, T56 do not support RAM testing temporarily, waiting for the later update. 











~Test Range a_i 61512 Location in Socket 
FLASH StartAdr —-------- End Atte ceseee 
Data Bus [_] Increase 
Address Bus Unit 














Plug IC into ZIF socket,Click-<Test=-Button 

















BACK 


There are four methods of RAM testing. Through these four methods, you can basically test whether the RAM cell function is 
normal. General programmer can only read and write the RAM cell and cannot test whether the RAM is good or bad. 
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For example, if two adjacent address lines are short-circuited, it is impossible to check out the problem by simply reading and 


writing data from the RAM cell. So only one way to test is not a complete test. Plug chip and click [Testing] button to test RAM. 


5. EMMC/EMCP programming 


Only T56 can support EMMC EMCP, TL866ll cannot support this function. 
eMMC (Embedded Multi Media Card) is a standard specification for embedded memory developed by the MMC Association, 


primarily for products such as cell phones or tablet computers. By integrating a controller into the package, providing a standard 


interface and managing flash memory, eMMC allows handset manufacturers to focus on other parts of product development and 


shorten the time to market. 


EMCP is a higher-level memory device than EMMC, which combines EMMC and LPDDR into one package, reducing the volume 


and design for circuit connection. 
EMMC/EMCP are available in various BGA packages, general: BGA153/BGA169/BGA162/BGA221/BGA100/BGA254/BGA529 


T56 programmer can support them all well. 


5.1 EMMC Memory 


EMMC flash memory can have up to 8 storage areas, named as BOOT 1/BOOT2/RPMB/GPP1/GPP2/GPP3/GPP4/USER. Among 


them, GPP1-4 are user-defined partitions, which are not configured at the factory. 


BOOT1/BOOT2 is generally used as system boot area and boot data backup partition 

RPMB is a special storage partition, data can be read always, but writing requires a 32-byte authentication key. It must 
be written through a complex HMAC_SHA256 authentication algorithm, in order to prevent hacking software from 
illegally modifying the data. 

GPP1-4 are user-definable hardware partitions, which are used in the same way as the USER partition 

USER partition, the largest user data partition 

Partition write protection, GPP1-4 and USER partitions can be written protection in groups, and the write protection 
modes are temporary write protection, permanent write protection, and power-on write protection. After setting 
permanent write protection, the protected WPG group can't be erased or modified data permanently. 


EMMC password protection function, if the password is set, the password must be unlocked before accessing the USER 
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area, otherwise it cannot access. 
@ ECSD and CSD are configuration registers. The various configurable parameters of EMMC are set in [Device config ]. 
Great part of the registers in ECSD and CSD are read-only registers. 


@ CID is identification mark of the chip at the factory, which can only be read and cannot be modified. 


5.2 EMMC function supported by 156 
5.2.1 Analysis of the original chip 


This function allows you to get a full overview of the original chip and do operations the way you want. 


The content of the original chip is analyzed and the following results are displayed: 


Display chip manufacturer information and life cycle 

Visually display the usage of up to 8 partitions of the chip 

Each partition Displays whether it is write-protected, readable, rewritable or erasable 
Displays whether the whole chip is temporarily write protected or permanently write protected 
Display whether the chip is password protected or not 


Display whether the chip uses 32-bit authentication key written to the RPMB. 


Display other important parameters of ECSD CSD CID 


5.2.2 Read/Program function 
All functions can be done with one key 
Read CID/CSD/ECSD. 
Clear temporary write protection before programming 
Clear temporary write protection group before programming 
Erase chip before programming 
Blank check before programming 
Program 32-bit authentication key 
Check the chip password 
New partitioning of the chip (partition Config) 
Read and write to BOOT 1 
Read and write to BOOT2 
Read and write to RPMB 
Read and write to GPP1 
Read and write to GPP2 
Read and write to GPP3 
Read and write to GPP4 
Read and write on user data (User) 
Setting temporary write protection group 
Setting permanent write protection group 
Setting chip password (or reset password) 
Program ECSD 
Program CSD 


Automatic verification of all the above operations after programming 


5.2.3 ISP in-circuit programming 
@ Ultra-stable ISP in-circuit programming with line length up to 40CM, working frequency 40MHZ, reliable work 
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@ ISP can also use 4-bit wide mode, operation speed increased to 4X faster 


@ See details on Section 5.9 ISP in-circuit programming example. 


5.2.4 EMMC ONE-KEY-GHOST 


When reading EMMC, the one-key-ghost project can be automatically generated to realize the one-key copying of the 


Original chip content to the new chip. See details on section 5.8 one-key-ghost example. 


5.2.5 Other EMMC Functions 


The working frequency and working voltage of EMMC can be adjusted manually. 

Data in the user area can be read and written in blocks and multiple files 

If there is a password protection when deleting, perform forced erase 

Password can use ordinary password or SHA1 encrypted password 

The value of ECSD/CSD can be imported from the ECSD_CSD file or manually set by the user 

Data CRC error can be ignored during read operation 

Optional automatic verification after the reading operation is completed. 

There are high-definition pin diagrams and ISP wiring diagrams in the device information. The pin check and locate the 
BGA pin. 


EMMC has real-time accurate rate display during read and write operations, and the final total time 


5.3 EMMC select IC 


5.3.1 The usual method to select IC 
Type in IC model (for example, MTFC4GMVEA-1M), as shown below (better to select by this method, AUTO may be not work 
normally on few of chips): 





Search Device Manufactory Device 








| MTF Cc. ‘4 GMVE A- 1 M MICRON EMMC (1) MTFC4GNVEA4-1M S8Bit @BGA153 


Type 


(@ ALL 

(~ ROM/FLASH/NVRAM 
(~ MCU/MPU 

(~ PLD/GAL/CPLD 
(~ SRAM/NVRAM 
(~ NAND 

(~ EMMC/EMCP 
(~ VGA/HDMI 


dAicron 


MTFC4GMVEA-1M  4Bit @BGA1S3 
MTFC4GMVEA-1M  1Bit @BGA1S3 
MTFC4GNVEA-1M_ (ISP) 4Bit 
MTFC4GNVEA-1M_ (ISP) 1Bit 








Micron Technology, Inc IC Total: 26022 


| Select | Cancel | 


In general, there are 5 options for the same model EMMC: 








8bit means 8 bits of data bus width is used when programming, and works at the fastest speed. 

Abit means 4 bits of data bus width is used when programming, it is available when chip pin D7:4 is damaged. 

1bit means 1 bit data bus width is used when programming, and can be used when chip pin D7:1 is damaged, and is the 
slowest. 

ISP_4Bit: 4 bits of data bus width is used when programming through ISP. At this time, the programming speed is also 
faster through ISP. 
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@ ISP_1Bit: 1bit of data bus width is used when programming through ISP. 


5.3.2 Select AUTO EMMC 


When IC model cannot be found in the list, you can type in "AUTO EMMC" to select the corresponding package as below: 


Search Device 


AUTO EMMC 


Type 

ALL 

~ ROM/FLASH/NVRAM 
~ MCU/MPU 
PLD/GAL/CPLD 

~ SRAM/NVRAM 
NAND 

EMMC/EMCP 

~ VGA/HDMI 


om) 


eee«e 


a) 


XGecu ® 


I 
| 
I 
I 
I 
I 
I 
I 
| 
I 
‘| 
I 
I 
I 
I 
I 
I 
I 
Automatic Identification 
| 





= 





IC Total: 26022 





Manufactory 


Device 


AUTO EMMC (ISP) 1B 1.8V (recommend) 
AUTO EMMC (ISP) 1B 3.3¥V 

AUTO EMMC({ISP) 4B 1.8V 

AUTO EMMC(ISP) 4B 3.3¥ 

AUTO EMMNC 6B 1.8V @BGA100 (recommend) 
AUTO EMMC_8B_3.3V @BGA100 

AUTO EMMC_ 4B 1.8V @BGA100 

AUTO EMMC 4B 3.3V @BGA100 

AUTO EMMC_1B 1.8V @BGA100 

AUTO EMMC 1B 3.3V @BGA100 

AUTO EMMC 8B 1.8V @BGA153 (recommend) 
AUTO EMMC 8B 3.3V @BGA153 

AUTO EMMNC 4B 1.8V @BGA1S3 

AUTO EMMC 4B 3.3V @BGA1S3 

AUTO EMMC_ 1B 1.8V @BGA153 

AUTO EMMC_ 1B 3.3V @BGA153 

AUTO EMMNC 8B_1.8V @BGA162 (recommend) 
AUTO EMMNC 8B_3.3V @BGA162 

AUTO EMMNC 4B 1.8V @BGA162 

AUTO EMMNC 4B 3.3V @BGA162 

AUTO EMMC_ 1B 1.8V @BGA162 

AUTO EMMC_1B 3.3V @BGA162 

AUTO EMMC 8B_1.8V @BGA169 (recommend) 
AUTO EMMC_8B_3.3V @BGA169 

AUTO EMMC_ 4B 1.8V @BGA169 

AUTO EMMC_ 4B 3.3V @BGA169 

AUTO EMMC_1B 1.8V @BGA169 

AUTO EMMC_1B 3.3V @BGA169 

AUTO EMMNC 8B 1.8V @BGA221 (recommend) 
AUTO EMMNC 8B_3.3V @BGAZ21 
AUTO EMMC 4B 1.8V @BGAZ21 
AUTO EMNC 4B 3.3V @BGAZ21 
AUTO EMMC_ 1B 1.8V @BGAZ21 
AUTO EMMC_ 1B 3.3V @BGAZ21 





If you program with adapter, select IC of the corresponding package, such as BGA153: 


www.XGECU.com 


There are 6 options under BGA153, usually choose the first 8B_1.8V, which represents 8-bit of data bus width is used, IO 


voltage is 1.8V. 


If you in-circuit program via ISP, usually choose ISP_1B_1.8V (in general, the motherboard IO voltage is 1.8V). If the 
motherboard IO voltage is 3.3V, choose ISP_1B_3.8V. 


If choose 1.8V, cannot be programmed normally on motherboard, you can try to change to 3.3V for testing. 


5.4 EMMC Operation Options 


5.4.1 Programmer Operation Options 


rae 


Operation Options 


Read all and Save to ONE KEY GHOST project 


Verify After Programming or Read. 


Select Clock 


36 MHZ = 


Select Power voltage |VCC=3.3V/VCCQ=1.8V nd 
¥oce + 0.0V = | |vr0 + 0.0V v 


[ ] Ignore data bus CRC errors when reading 


Fine adjust voltage 


Skip of blank data when programming 


@ Read all areas and save one-key-ghost project 


while reading, automatically analyze the chip, read all the data. This option will ignore the next (read, program, erase) 


option in the part of the selection, will automatically select according to the chip content. After reading, in the data folder 


a project file EMMC_GHOST.MPU will be automatically generated. If the user wants to clone a chip, just open this ghost 


project file and directly program it to the new chip. 


@ Automatically verify after programming or read 


after reading or programming, the data will be automatically verified once. 


@ EMMC Select Clock 
Select the clock frequency, 36MHZ is default, you can select 40MHZ or 50MHZ while mass production. If the reading of 


data is unstable, you can also reduce the clock frequency for testing. Maximum 40MHZ via ISP. 


@ EMMC select Power voltage 
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Select the IC power voltage, a great part of the chip works at VCC=3.3V/VCCQ=1.8V, with extremely high stability. 

@ EMMC fine adjust voltage 
If the reading is unstable, can fine-tuning the voltage. It is possible to get a better stable effect. Users can do various 
tastings of voltage fine-tuning. 

@ Ignore data bus CRC errors when reading 
CRC verify error will be ignored when reading, this option is not recommended. 

@ = Skip of blank data when programming 
during the verifying or programming, the blank data is skipped in order to increase the programming speed. 


5.4.2 Read, Program, Erase options 


2. Reading “ Erasing / Programming Options 


Unlock Temporary write protection ({ Clear TMP_WRITE_PROTECT hit } 
Unprotect All Temporary groups 
C] RPMB Authentication Key{ 32 bytes } Operation 


[] Input Password before Operation 


BOOT 1 
BOOT 2 
C] RPE 


[] General Purpose Partition GPP1 
[| General Purpose Partition GPP2 
C] General Purpose Partition GPP3 


C] General Purpose Partition GPP4 


User Area 


[| Set Temporary Protect For Slected Groups 

C] Set Permanent Protect For Slected Groups 

C] Set New Password After Programming (Reset Password when Blank Input) 
Extented CSD {(ECSD) programming 


[] CSD programming 


Select the chip area to read or programmiing. If an item is not selected, no operation will be performed for this item. 
The key option RPMB: when programming RPMB, the option [RPMB Authentication Key Operation] must be checked and the 
correct 32 bytes authentication key must be loaded in the file menu before programming. After the authentication key is written, the 


chip will use this authentication key permanently and cannot be rewritten with a new authentication key. 


5.4.3 Erase, Blank Check option 


3. Erase / Blank Check / Partition Selected 


Erase Before Programming [| Check Blank Before Programming 

User idrea ALL v [| User idrea [First 16M Bytes w | 
[] Boor 1 [] Boor 1 

[ ] Boor 2 [ ] Boot 2 

[| General Purpose Partition GPP1 [| General Purpose Partition GPP1 

[] General Purpose Partition GPP2 [| General Purpose Partition GPP2 

[| General Purpose Partition GPP3 [| General Purpose Partition GPP3 

| General Purpose Partition GPP4 [| General Purpose Partition GPP4 


Forced Erase when Locked 


The erase and blank check operations performed before programming, generally do not need to be changed, just use the default 


settings. If the chip is new while mass production, the erase can also be unchecked. 


5.4.4 File path and file name settings 
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4. File name / Path / Address Assigned 


File Directory : select Directory 
D:\Xgpro_T56\UserData\EMMNC Data 




















































































































































ECSD+CSD File : fecsD CSD.BIN ~~~ {~~ analysys ECD | 
BOOT1 File: fpooTi.BIN = Ei 
BOOT2 File : OOT2.BIN | ey 
RPMB File : [RPMB.BIN = Ey 
GPP1 File: |GpPi.BIN fay 
GPP2 File: |gppz.BIN- ee 
GPP3 File: |GpP3.BIN = [=] 
GPP4 File : |Gpp4.BIN. [-] 
User Area: (@ Single File Mode ,All User Area 
(~ Multiple Partition(Address aligned by 64K) 
Single User ear File : UserData.BIN = | 
Start Address End Address File Name Partition Size 
Mv] 00 OO1F FFFF UserPart 1.BIN 
IV] 00 0O02F FFFF UserPart 2. 
lV] OO O4FF FFFF UserPart 3. 
| UserPart 4.BIN 
[ ] UserPart 5. 
[| UserPart 6.BIN 
[| UserPart 7.BIN 
| UserPart 6. 
f UserPart 9.BIN 
[| UserPart 10.BIN 
[| UserPart 11.BIN 
= ——————— 








@ Select the data folder 
set a new folder before reading or programming, the folder name should preferably be device name + IC model for future 
use, all the data read will be stored under this folder. Including the automatically generated one-key-ghost project files. 
Of course, the folder name can be changed after reading. When programming, just select the data folder and make sure 
that all the data files be located under this folder. 

@ File name, read generally do not need to change the file name. 
If new product development, mass production, select the data file of the corresponding area. 
Note: All files must be set in the same folder. 

@ Analyze ECSD button 
Check out the information related to ECSD file under the folder. 

@ = lf the development of production 
ECSD file may not exist and user can set the relevant configuration in [Device Config]. 

@ Blocks mode 
it can be sliced up to 16 blocks, block address must be 64K aligned, 1K=1024 bytes 
Users can write or read the USER Area in blocks, which is convenient for flexible applications when programming in bulk. 
The blocks mode also has a special function: if the unstable chip has nearly reached the end of its useful life and you 
want to read the data inside, you can read in blocks. After reading of the all data in the good blocks is completed at one 
time, then the bad blocks can be read separately for several times (while reading, disable the option "Read all and Save 
to ONE_KEY-GHOST project"). 


5.5 EMMC Device Configuration 
5.5.1 EMMC Password Setting 
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1. Password Set 


Password In the Device (ASCll) : | 
New Password (ASClIl, Reset Password when Blank) : | 


| | Use SHA-1 Secure Hash Algorithm 


EMMC can use password protection, that only protects the USER Area, BOOTx/GPPx/RPMB partition, cannot be protected by 
password. 


T56 can set normal password and SHA1 password, please refer to EMMC standard document for details. 


5.5.2 ECSD Setting 


Load ECSD_CSD from BIN filefelse user define}when Programming 
2. Extended CSD 


[ECSD CSD values are loaded from the file when programming] button 
When checked, all fields of ECSD and CSD are loaded from the file and the set values in the interface are invalid. 


set fields by user while unchecked. 


 4afEat ECSD CSDIAMECSD CSDM TERA (IER APIS) 
2. Extended CSD 


[~ PARTITION_SETTING_COMPLETED[155] [  oott—*™ts 

( <OTP> bits0 is valid , bit?:1 Reserved } 

[” WR_REL_SET[167] [iF 
( <OTP> bits4:0 is valid , bit?:5: Reserved } 

[~ GP_SIZE_MULT_GP1[145-143] [  ooo0oo 
( <OTP> defines GPP1 size } 

[” GP_SIZE_MULT_GP2[148-146] [  ooo00o 
( <OTP> defines GPP2 size } 

[” GP_SIZE_MULT_GP3[151-149] [  ooo000 
( <OTP> defines GPP3 size } 

[~ GP_SIZE_MULT_GP4[154-152] [ ooo000 
( <OTP> defines GPP4 size } 

[~ ENH_SIZE_MULT[142-140] [  oooo00 
( <OTP> defines Enhanced User Data Area Size ) 

[~ ENH_START_ADDR[139-136] 





























( <OTP> defines Enhanced User Data Start Address } 
[~ PARTITIONS _ATTRIBUTE[156] [hh oott—t 
( <OTP> bits4:0 is valid sets enhanced attribute in GPPx } 
[ EXT_PARTITIONS ATTRIBUTE[53-52] 0000 
( <OTP> sets extended attribute in GPPx } 


[ USE_NATIVE_SECTOR[62] OD 


( <OTP> Valuse is 0x00 or Ox01 , Ox02-OxFF: Reserved } 








Tt : # EI 
( BitS:4 can be set, bits1:0 is read only, others Reserved } 

















[) PRE_LOADING_DATA 00000000 
( OxO0000000-OxFFFFFFFF , value reset after a power cycle } 
(the host reports to the device its production state ) 

[~ PARTITION_CONFIG[179] [  —hloott—*ts 
( This register defines the configuration for partitions } 

[~ BOOT_CONFIG_PROT[178] [  —hoott—*™t 
{ <OTP> This register defines boot configuration protection } 

[~ BOOT_BUS_CONDITIONS[177] [  —hoottt—*™ 
( This register defines the bus width for boot operation } 

[> BOOT_WP[173] [ oo | 
( <OTP> Boot area write protection register ) 

[~ USER_WP[171] [  oot—*™ 
( <OTP> User area write protection register ) 

[~ FW_CONFIG[169] [ oo | 
( <OTP> Bit(Q]: Update Disable Bit[?:1]: Reserved ) 

[7 BKOPS_ENI163] [ oo | 
( <OTP> Bit[0):=1 ENABLE Bit[?:1]: Reserved } 

[7 RST_n_FUNCTION[162] [  —hloott—*™t 
( <OTP> Bit[1:0): valid Bit[?:2]: Reserved } 

[7 SEC_BAD_BLK_MGMNT[134] a 
( <OTP> Bad Block Management mode, bit?:1 Reserved } 

[~ PERIODIC_WAKEUP[131] [  —hoottt—*™ 
( Periodic Wake-up timer } 

[~ SECURE_REMOVAL_TYPE[16] BE a 


( <OTP> Bit [5:4]: Cfg. Secure Removal Type, B3:BO read only } 
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@ All ECSD register fields options, only when checked, the chip will be programmed and verified. Unchecked registers will not 
be programmed and verified. 

@ = The first major option [PARTITION SETTING COMPELTED 155], when checked, the value must be 01, and it’s subparts must 

be all checked, and the subparts must meet the EMMC standard, otherwise they cannot be written. This major option is to set 

the EMMC partition and partition attributes, the chip is not allowed to repeatedly set the partition size and attributes. 

All registers marked with OTP are written at once, so please set them carefully 

When [USE_NATIVE_SECTOR 62] button is checked, the value must be 01, otherwise it is the error. 

All other registers can be checked, or only the non-00 registers be checked 


Note: The above options will be checked automatically when the original chip is read with the one- key-ghost project is 
generated automatically. 
5.5.3 CSD Setting 


a. CSD 


FILE_FORMAT_GRP <OTPz : lO= as FILE FORMAT — || 
FILE_FORMAT <OTP> : 0d = Hard disk-like file system| ~| 

COPY <OTP> : lO= Original = 
PERM_WRITE_PROTECT <0TPz : lO=Disable = sd 
TMP_WRITE_PROTECT : lO=Disable = si 

Ecc: loo = Defaut = i 


@ = If any option in CSD is non-zero, check the option [CSD programming] in EMMC Operation Options (2.Reading/ 
Erasing/ Programming Options) 
@ When auto-generating one-key-ghost project, the software will check the all ECSD/CSD options automatically. 


5.5.4 Write Protect Groups ( WPG) 


4. Write Protect Groups Set (¥WWPG) 


Permanent Protected Group(s) (e.g. 1,3, 11-20,...): GPP1 





Write Protect is for the part of chip data, the protection type and protection group are set according to the user's requirements. 
@ While Analysis of the original chip function: you can check which groups of the original chip was protection set. If you need to 
set the same write protection group as the original chip, please type in manually. 


@ When the ECSD file has been loaded, you can check the specific address corresponding to the write protection group. 


5.6 EMMC Analysis 


37 


Xgpro Software User Guide —T56/TL866ll 


www.XGECU.com 











gpro v10.75 
File(F) Select IC(S) Project(P) Device(D) Tools(v¥) Help(H) Language(L) 
A z | — = Erase (mh C3 
sro Doce 2 a | tan ram [yg  anour = an 
Select IC -IC Information(No Project opened) 
ChipType: =EMMC ChkSum: Not Used 
| AUTO EMMC_8B_1.8V @BGA4153 (recommend) >| IC Size: Auto OGB - 256GB 


~ Set Interface 
@ ZIF socket © ICSP port lM 


| Address Jota 2i 3] 4 | 
6666-66066: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
66066-66016: 61 61 66 EB 38 66 66 66 66 66 66 66 66 66 66 66 
6066-6626: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
66066-6636: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-66046: 63 AS 62 66 81 66 66 66 66 66 66 66 66 66 66 66 
6666-66056: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6066: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6676: 66 66 66 66 66 66 66 66 66 66 64 66 66 86 66 66 
6666-6086: 66 66 61 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6696: 66 66 66 66 66 66 66 66 66 66 66 66 66 ES 66 66 
66066-660A6: 67 66 81 66 66 66 15 1F 64 66 66 66 66 66 66 66 
6666-6686: 66 62 66 68 66 66 66 62 66 61 66 66 66 66 66 66 
6666-6606: 67 66 62 66 5? 1F BA 83 66 66 66 66 66 68 GB 68 
6666-6606: 6C 68 6B 66 66 CB 72 66 OF 13 14% 68 68 16 61 11 
6666-66E6: 61 66 86 66 67 18 18 55 11 66 66 6B 66 66 66 66 
6066-66F6: 66 64 66 66 66 66 66 FF 19 66 62 66 66 66 65 66. 
6666-6166: 66 66 66 66 66 66 66 66 81 O64 81 & 81 & 66 68 
66066-6116: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6126: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6136: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6146: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 686 
66066-6156: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6166: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
66066-6176: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6186: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 686 
66066-6196: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-61A6: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 
6666-6186: 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 


Vcc current Imax: [Default | @ 8 Bit 











tty El 





XGecu”® Pro 


Save Log | _Clear_| 


i ee 


* Clock Frequence is 8.000 MHZ * 
KEEFER 


.-Ernac Initialization 
OCR register : 

. Read device CID 

..-Read device CSD 

..-Read device ECSD 


COFF8080 
Successed 
Successed 
Successed 


-- Production Info.and Device life time-- 


: 13 

: O27542 
Product Date : 10-2017 
Version : MMC V5.0/5.01 


03-10% device life 
03-10% device life 
: Normal 


Device life time Type A: 
Device life time Type B : 
Device life time (PRE EOL INFO) 


-- Partition Size Info.-- 


BOOT1 SIZE 
BOOT2Z SIZE 
RPMB 
GPP1 
GPP2 
GPP3 
GPP4 
USER SIZE 


: 16354 KB 


, 760,128 KB 





Ext.cSD Authent.Key Options Config Device. Info 
Options IC Config Informaton 
Iv Pin Detect [check 1 
7 
| Skip Blan Addr. Range: @ © Sect | dnalysys Ic 
| Blank ct Ox[ oooo0000 -> [ coooorFF | | Cassie 22] | 
Ready Default Programmer(1): XGecu T56 ' o000 0000 
@ Analysis of the original chip is carried out at a lower clock frequency of 8MHZ. You can test whether the connection is 
normal: lf not, try to change the working voltage, or fine-tune the working voltage or select a different bus width for 
several tests. In that way, for the chips with unstable performance, may be you can get the correct result. 
Connect the adapter or ISP, click button [Analysis IC] 
Click button [SAVE LOG] to save the analysis result 
@ From the result, you can get the use condition of the chip 


m Display information about the IC's manufacturing 

Visually display IC use condition of up to 8 partitions 

On each partition display whether it is write-protected, readable, rewritable or erasable 
Display whether the entire chip is temporarily write-protected or permanently write-protected 
Display if the IC is password protected 

Display whether the IC uses 32-bit authentication key to write for RPMB. 


Display other important parameters of ECSD CSD CID 


Example: The IC analysis results are shown below: 


38 


Xgpro Software User Guide —T56/TL866ll 


TETAS TTT a aw 


1 Programmer Connected. 
TPT TT TTT eee 
Device 1: “Gecu T56 Yer: O0O.01.37 
USB POWER YOLT&GE: 04.91 


USB SPEED MODE: HS 4c00NHe 
REPRESS REPRE EP EER Ee PR EO ee 


< Analysis IC > 


Pin Detected Passed. 


TET TTTATTTTTTTTTTTP a aoa 


* Clock Frequence is 6.000 MHz - 


ee ee 


1..Emmc Initialization ...... 
OCR reqister : COFFsS0e0 
Z2..Read device CID ....... Successed 
3..Read device CSD ....... Successed 
4..Read device ECSD ...... Successed 
<1> -- Production Info.and Device life time-- 
MID cae Me 
PHM : G275428 
Product Date : 10-2017 
Version : NMC V5S.0/5.01 


Device life time Type 4&4 : OF-105 device life time used 
Device life time Type B : OF-105 device life time used 
Device life time (PRE EOL INFO) : Normal 


f> -- Partition Size Into.-- 


BOOTI SIaE >: 16504 EB 
BOOTa SIE : 16504 EB 


RPMB SIE : Sle EB 

GPP1 SIeeE : O KB 

GPPa SIZE : O KB 

GPPS SIZE : O KB 

GPP4 SIeeE : O KB 

USER SIZE : 3,760,125 EB 


{ Ox OO E580 o000 } 
<3> -- RPMB Security and Password —-- 
Authentication Fey not yet programmed, RPMHB not used 


Password Protect Features : YES 
Password Protected : Wot Locked 


o./ Read EMMC 


@ SelectIC (example: JY001_8bits, this is a 4GB IC) 


<4> 


<5> 


<6> 
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-- Write Protection -- 


ERASE GROUP_DEF : OO 

Disable PERM WP PROTECT : No 

User Permanent protection: Enable 

Whole Chip Permanent Protect : Not protected 
Whole Chip Temporary Protect : Not protected 
BOOTI1 Write Protection Status : Not protected 
BOOT2Z Write Protection Status : Not protected 


Write Protect Group Size : Oxs00000 [ 6192 KB } 


User Write Protection Group (O=Not Protected TE=Temp Protectec 


WPG Start Addr. O 123 4 5 6 7 8 9 10 11 12 13 
00000 o0-00000000 oO 0 0 0 0 0 0 0 0 0 0 0 0 0 C 
00032 00-10000000 oO 0 0 0 0 0 0 0 0 0 0 0 0 0 C 


USER Partiton --- Not any Write Protected . Total Write Protect 


-- other Informations -- 

MAX READ BL LEN : 512 bytes 

MAX WRITE BL LEN : 512 bytes 

MAX TRAN SPEED : 55.000 MHZ 
ENH_START_ADDR : OOoOo00000 
ENH_ SIZE MULT : Oooo000 
MAX ENH SIZE MULT : OOOOES 
PARTITIONS ATTRIBUTE : OO 
WR_REL_ SET : iF 
WR_REL PARAM : 15 


PARTITION SETTING COMPLETED : O00 


HC_WP GRP SIZE : 16 
HC_ ERASE GRP SIZE : 1 
WP_GRP_ ENABLE sc od 
WP_GRP_SIZE : 15 
ERASE GRP MULT Cae eb 
ERASE GRP SIZE : 31 
ccc : OOFS 
DSR implemented a: mak 
PARTITION ACCESS : 30 ms 
ERASED MEM CONT : OO 
DYNCAP NEEDED : OO 
SECURE WP INFO : OO 
SEC ERASE MULT : 18 


ERASE TIMEOUT MULT: 11 

NATIVE SECTOR SIZE: OO (5125) 
INI_ TIMEOUT AP : 10000 ms 
INI_ TIMEOUT EMU : O ms 


-- Result -- View More Information in ECSD and CSD 


. BOOTL Partition Not be Permanent write-protected, it can be 
. BOOT2Z Partition Not be Permanent write-protected, it can be 
. GPP1 GPP2 GPP3 GPP4 The Partition Invalid 

. USER Partition Not be Permanent write-protected, it can be 
. RPMNB Partition is Blank, not be Used. 

. This chip's content can be completely copied to another ch: 


Ano h WN 


@ Set the folder for data storage in [Operation Options] (EMMC_DATA, you can set it arbitrarily) 


@ Don't need to change any other settings, just click [Read] button to start reading. 


Reading results as below: 
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File(F) Select IC(S) ProjectiP) Device(D) Toolstv¥i Help(H) Language(l 
r sey Erase fed 4 
ne AD eck Be ia Dea . am Ram [Eg cy anu 1 ean pLahy 





Select IC ) IC Information(No Project opened’) 


\}| ChipType: EMM ChkSum: Not Used 
SUTO EMMC_ 86 1.8 G@BG4153 (recommend) hd ico Auto OGE - 256GB 


Set Interface 
f IF socket {2 ICSP po LC) icsP Vcc Enable Viec current Imax: Default +| f 8Bits © 16 Git 


Location in Socket 


[ODEL AUTOEMMC 8B 1.8V 
teediene ADP-BGA1T69-EMMC Save Log _| 


BGA1534169 (TOP View) 





Verify Restart EMMC .... 

Int EMM... OK! ( OCR register: COFFS080 4 

Yerifing CSD Succeeded 

Yeriting ECSD Succeeded 

Yerifing BOOT1 : Succeeded. Time: 0.716 5 -- Partition Size :16364 KB Proces: 
Yerifing BOOT2 : Succeeded. Time: 0.716 5 -- Partition Size :16364 KB Proces: 
Analysis file i complete, Space usage: 3.73% time: 205 

Verifing User Area: Succeeded. Time: 32.16 5 -- Partition Size :3760125 KET f 
Yerifing Succeeded 32 hits Checksum: Ox 46D26360 

Reading +Veriting Succeeded Total Time: 3M 265 


OOOO COOO0000 
OOOOOOSOOOCOOO00 
OOOOOOSOSOOOOOO0 


Saved ONE KEY GHOST project to Tile: . ae 

D: iigpro'lserDatalemme_d2'EMMC Ghost mpi R OOGCOOCOOOCG OCS 
ead Result - OOOCOOOOCOD0000 

}< > COO OOCeCoCoOCTos 





Reading + Verfing Succeeded 


loo) | 
View Adpter | Read | BACK | 


PIH Aft 





@ 4GBIC, the total time to "Read + Verify" is 4 minutes 28 seconds, this is a more typical time for actual operation for your 
reference. Generally, the IC of more larger capacity will get the faster reading and writting speed. 
@ After reading is finished, an EMMC_GHOST.mpj project file is automatically generated as shown above, just open this 
project when programming. 
After reading, the contents of the folder are as below: at least 5 files will be generated, one of which is a one-key-ghost project 
file. If 1G uses RPMB or GPPx, there will be more files. 
















Gli ¥4 = 
4 ES = C2] 
| x 7 #28 ~ e- EB Sabiaet= 
7 = J ye : 2 = | NAIA] ~ . Senay 
peed es a if fete anni 
a . _ ‘ Rimiad= 
mila \ Sete basar See 
Bail athe $920 Epes FI ines 
ee » > IHF A DATA (D3 Xgpro UserData Emme_data v @ #2"Emmce data" p 
Microchip Solutions USB % SER ° {az ABA se FH Kh 
muerosnip_seiubans 20% * BOOTI.BIN 2021/1/23 16:24 © BIN 344 16,384 KB 
MiniPro * BOOT2.BIN 2021/1/23 16:24 BIN 3744 16,384 KB 
_, Minipro_7190 * ECSD_CSD.BIN 2021/1/23 16:24 BIN 344 1 KB 
_ Onedriver | EMMC_Ghost.mpj 2021/1/23 16:28 MP) x44 14 KB 
~ Program Files * UserData.BIN 2021/1/23 16:19 BIN x44 7,634,944 KB 
A “ 
5 NAB = 





Note: Before reading, it will check the remaining capacity of the disk, if the capacity is not enough, select the data folder 
in the operation options and save it to another disk 


5.8 Program EMMC: one-key-ghost example 
One-key copy of new IC read in the previous section 
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5.8.1 Select IC (for example: JY001_8bits) 
How to select IC correctly, you can refer to the previous contents. 
5.8.2 Click [Open Project] in Project Menu 


> 
tas 


‘File(F) Select IC(S) Project(P) Device(D) Tools(V) 

















Dv Dios Qu & Open Project(O) 
Select IC Save Project(B) 
: Save Project As(S) 
| Jv Close Project(C) 
Set Interface Project attrib(A) 
@ ZIF socket Modify Password(K) 
rs] +73 49 
+ « Xgpro » UserData » Emmc_data vi ® #222"Emmc_data" P 
oy 8 = - EASE c+ © @ 
si a Bir : (ear AER eal Heh 
¥ Ne . ") EMMC_Ghost.mpj 2021/1/23 16:28 MP) 44 14 
2 RB < 
=) BR ¢ 
3602 Sil iee 
Emmc_data 
— IMG2 
PLUS_DATASHE 
CS ena 
“B30 Re 
ve 
= BR 
zs) SU vy < > 
3tE(N): |EMMC_Ghost.npj | Project files(*.mpj) v 
ap | FO) | |e 





After clicking [Open], the project has been loaded 


5.8.3 Program new IC (done by one key) 
Don't need to make any other settings, at this time the data folder, ECSD, CSD and other operation options have all been set 
automatically, directly click [PROG.] button to copy and program. 


Note: For projects that need to program the RPMB partition, please see section 5.8.4 for details 
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File(F) Select IC(S)) Project(P) Device(D) Tools Help(H) Language(l) 
A r Erase lth EE 4 
A ins AD ec ae a + so FZ, *P ABOUT EA acu. pL} 
Select IC IC Information(No Project opened) 
ChipType:  ERIMIC ChkSum: Sot Used 


KXGecu” Pro 


AUTO EMMC_8B_ 1.8 @BG4A153 (recommend) nd 


Set Interface 


It Size: Auto OGB - 25666 































a | Tierra et ‘PRE EOL IN Ay 
gogg-aege: |r rogram me onsrsroms ss 
gao0-0010- — inno 
Location in Socket 
goa0- 0026: iets AUTO EMMC_8B_1.8V aa ae 
BHHB-BB38: a4 EE 
AG80-bA48- ise Adapter: A DP-BGAT69-EMMC save Log | BGA153.169 (TOP View) ER 
HHBB-AHSH: Analysis file is complete, Space usage: 3.73% time: 205 ry 'B 
HHG8-HHb8- Programming User “rea: succeeded. Time © 31.735 5 -- Partition Sire 3760128 Ooogoanoaoaaaoaaoance 'B 
gga8-9078- Programming ECSD Succeeded. UME” 10 ms SOOOoagqgarsegoogaaan tr 
Programming CSD Succeeded. Time: Ome GOGO oOOOOOOS ls 
HS88-BBER: | |Programming 32 bits CheckSum: Ox 46026360 Ook OOo r 
aee8-He98: | |Verity Restart EMMC .... OO OO0000 800 (60,128 KE 
7 Int EMM... OK! COCR register: COFFS080 3 Ox OOF ES&O 
BHGHB-HBAB: 2 Oooo OOo _ 
Verifing CSD Succeeded OOO 8 rete 
HH56-G5BG: | |Verifing ECSD Succeeded feel Been ar 
‘a: . ee 4: io, Ooo @ oOo 
HHBB-BBCH: Verifing BOOT1 : Succeeded. Time : 0.734 5 -- Partition Size :16354 KB Proces: 
. _ | |Merifing BOOT? : Succeeded. Time : 0.719 5 -- Partition Size 16384 KB Process OOO © OO 
HH66- 86D 8: = roeaain r not yet p 
_ | |Yerifing User Area: Succeeded. Time : 10.937 & -- Partition size :3760125 KEL OOO © OOO 
H600- GGEG- Programming eriting Succeeded 32 bits CheckSum: Ox 46026360 OoOoOoo oOo | 
H608-86F 8: Programming Successfull Total Time : OM 485 OoOaogeeocerocrece eatures = 
BHHG-61668: = OOOO CEeeOoCeCeoS | 
geas-e11a-| L* > SESROLeLeRelerelelenerelens 
g008-6120: NC | Garcccded aie 
BHHB-Bi36: PIH A414 ; 
aaes-aine:| 1” {___________ AGumeg : ane 
goo8-0150: View Adpter | BACK | i 
Ext,.cSoD 
Options IC Config Informaton 
if Pin Detect | 
- Erase/Program/verify by one key 
| || Auto ! 
| Addr. Range: f 4 (? Sect 
incall 
|_| Ox! gooo0000) -= | oo0001FF —__ 
Ready Default Programmer[1): #Gecu TS6 Oooo oooD 


Programming process as shown above, "Program + Verify" total time of O minutes and 48 seconds, it is faster than reading, 


because the blank data was skipped when programming. 


The new chip copy is completed. 


5.8.4 One-key-ghost project notes: 


When programming the project, the capacity of the BOOT, RPMB, and USER partitions of the original chip will be compared 


with that of the programmed chip. If the capacity of the new chip in any one partition is smaller than the original chip, will stop 


programming. 


When programming the project, the EMMC version of the original chip and the new chip will be compared. If the version of the 


new chip is lower than that of the original chip, the programming will be stopped. 


For projects that need to program RPMB partitions, the correct 32-byte authentication key is required. The user can load the 


authentication key in the File menu after opening the project, and save the project after loading. This authentication key will be 


used as the new authentication key when programming the RPMB. (Authentication key can also be loaded before reading. 


Save to project file when saving a project automatically with key.) 


If the authentication key is not loaded, when programming, the all-blank data OxFF will be used as the authentication key. 


Important Note: authentication key, one chip is only allowed to be programmed once, it cannot be read and cannot be erased. 


If the authentication key is lost, the RPMB data will be permanently immutable. For specific devices, incorrect authentication 


key will not pass. 


If new chip’s RPMB has been used when programming, but there is no authentication key, it will prompt key error. At this time, 
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the RPMB data cannot be programmed. If you have correct authentication key , the RPMB can be programmed normally. 


5.9 EMMC ISP in-circuit programming example 


EMMC in-circuit programming is an important and convenient application in the home appliance repair industry. T56 programmer 


through ISP programming, the rate reached to 40Mb / S (single line transmission measured: 4.7M bytes / second), ISP cable length 


up to 40CM, that is extremely high stability and high speed. For common TV motherboard 4GB IC, the read time is only about 800 


seconds. 


Note: working frequency setting is 36MHZ by default. Via ISP, it can be set to 40MHZ in most of cases. 


5.9.1 EMMC ISP connection 


ISP Schematic Diagram 


VCCO only exists at 3. 3V and it is high impedance at 1. 8Y. 
IF ¥VOCQG=1.8V, Please use an external power supply 





Emmc ISP Programming Connection 


GND vec J. ; 
voc vee [_ > KGecu ge eo oe 7 oy FS SE OH 
GND GND , = ST (i 4 Bitslhl HE ik 






OO DD00RRRR 








ay ie 4 At ee Connect when 4 Bits width 
Options Power 03 
D2 

— ome [)() 
—| CMD 
— fe te<25CM, Wire Length <25CM _=> GND 
= nn a! * 
=o 1 IJeHRTEHH, SRM ME “= GND 
— Do not separate the 3 wires here. . 
—— J 


Haikou Aingong Electronic Co,Ltd 


In general, 1bits only need to connect GND / CLK / CMD / DO to the motherboard, then power the motherboard. 


Notes: 


ISP has two grounds, both grounds need to be connected, and the ground point should be as close to the CLK line as 
possible. 

CLK line and the two GND lines do not separate, and CLK line should not cross with other lines, CLK line generally has a 
series of resistors R, you had better remove it. 

Both ends of the crystal of the MCU in PCB, connected to ground, stop the MCU from working. 

Connect the lines, power up the motherboard and check if the RST_n pin of the EMMC is high. If the RST_n voltage is 0, you 
need to pull up the pin, otherwise EMMC will not work. You had better connect 1K resistor to VCCQ (1.8V or 3.3V). This pin is 
the reset pin of EMMC. 

When power is supplied through external power supply, the computer and the external power supply's casing are must be 


reliably connected to the earth (anti-static interference) 
Note: When the ISP is powered by programmer and ISP_3.3V is checked, the VCC and VCCQ pins of programmer will be 


powered at 3.3V. When ISP_1.8V is checked, the programmer is only for VCC 3.3V, VCCQ high resistance state, VCCQ 1.8V 


needs external power supply. 
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EMMC BGA153/169 IC PINS: 
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5.9.2 Select IC and Analysis IC 


Bl Xgpro v10.75 


File(F) Select IC(S) Project(P) Device(D) Tools(V) Help(H) Language(L) 
|| Be Oem ine CB ay (REaD} | tam Ram [gs (Proc: {PRoc.} cy  apour en ele 
Select IC IC Information(No Project opened) 


ChipType: EMMC ChkSum: Not Used 
AUTO EMMC(ISP)_ 1B 1.8V(recommend) z| ee Auto OGB - 256GB 




















a Interface 


C ZiFsocket  @ ICSP port ICSP_VCC Enable Vee current Imax: [Default ~]  @ s Bits © 16 Bits 








Search Device See 


|AUTO EMMC AUTO EMMNC (ISP) 1B 1.8V (recommend) 
AUTO EMMC(ISP) 4B 1.8¥ 
—Type AUTO EMMC(ISP) 4B 3.3V 
AUTO EMNC_8B_1.8V @BGA100 (recommend) 
AUTO EMMC_8B_3.3V @BGA100 
(@ ALL AUTO EMMC 4B 1.8¥ @BGA100 
AUTO EMMC_4B 3.3V @BGA100 
(~ ROM/FLASH/NVRAM AUTO EMMNC 1B 1.8¥ @BGA100 
AUTO EMMC_1B 3.3¥ @BGA100 
(~ MCU/MPU AUTO EMMC_8B_1.8V @BGA153 (recommend) 
AUTO EMMC 8B _3.3V @BGA153 
(~ PLD/GAL/CPLD AUTO EMNC 4B 1.8¥ @BGA153 
AUTO EMMC 4B 3.3V @BGA1i53 
(~ SRAM/NVRAM AUTO EMMC_1B 1.8V @BGA153 
AUTO EMMC_1B 3.3V @BGA153 
(~ NAND AUTO EMNC_8B_1.8V @BGA162 (recommend) 
AUTO EMMC_8B_3.3V @BGA162 
(* EMMC/EMCP AUTO EMMC 4B 1.8V @BGA162 
AUTO EMMC 4B 3.3V @BGA162 
(* VGA/HDMI AUTO EMMC 1B 1.8V @BGA162 
AUTO EMMC_1B 3.3V @BGA162 
AUTO EMNC_8B_1.8V @BGA169 (recommend) 
AUTO EMMC 8B _3.3¥ @BGA169 
AUTO EMMC 4B 1.8V @BGA169 
AUTO EMMC 4B 3.3¥ @BGA169 
AUTO EMMC_1B 1.8V @BGA169 
AUTO EMMC_1B 3.3¥ @BGA169 
AUTO EMMC_8B_1.8¥ @BGA221 (recommend) 
AUTO EMMC 8B _3.3V @BGA221 
AUTO EMMC 4B 1.8¥ @BGA221 
AUTO EMMC_4B 3.3V @BGA221 
AUTO EMMC_1B 1.8V @BGA221 
KG Secu ( ® AUTO EMMC_1B 3.3V @BGA221 


Automatic Identification IC Total: 26022 

Select | Cancel | 

@ = Type in "AUTO EMMC" 

@ Select AUTO EMMC(ISP) 1B _1.8V 

@ Click <Analyze IC>button and check if the connection is normal. If there is no problem, will go to the next step 


























5.9.3 ISP read data from original IC 


Before reading, set 40MHZ as the operating frequency in the operation options and click button [Read] in the toolbar. 


I¥ Select Clock 





if Select Power voltage 
Chip Read APP Version: 10.75 


mopeL. AUTO EMMC ISP) 1B_1.8Vi(recommend) 
save Log | 


Location in Socket 






T56 Programmer 





Intt EMMI... OK! (OCR register: COFFS080 } 
Reading ECSD : Succeeded 

Authentication Key not yet programmed, RPMB not used 
DO: Calcu available disk capacity: 199 GE 127345678 
Reading BOOT1 : Succeeded. Time : 0.454 5 -- Partition Size :20468 KB 
Reading BOOT2 : Succeeded. Time : 0.436 5 -- Partition Size :2048 KB 
Reading User Area ... 


D3(used 4Bits] 
D?2(used 4Bits] 
D1(used 4Bits] 
Do 

CMD 

Gnd 

CLK 

Gnd 


_ o—P—FkEE..,,,tCiswCi‘i‘C if Bus 1 bits, DI/D2/D3 not used 


3g0% (Ms 
= View TCSP Connection | Read | STOP | 


Ht 
f 
6 
5 
4 
3 
Fa 
1 
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The reading process is shown in the figure above, the stable reading speed is 4.7MB/s at 40MHZ operating frequency. Reading 
speed is 4.1MB/s at 36MHZ, if there is the error, frequency can be properly reduced. 


Chip Read APP Version: 10.75 


Location in Socket 
MODEL: AU TOEMMC ISP) 18_17.8V(recommend) 
pare Log | 


* 


T56 Programmer 


Verify Restart EMM .... 

Int EMM... OK! ¢ OCR register: COPFFSO080 4 
Yerifing CSD Succeeded 

Verifing ECSD Succeeded ae 
Verifing BOOT1 : Succeeded. Time: 0.437 3 -- Partition Size :2045 KB Processi 
Yerifing BOOT? : Succeeded. Time: 0.437 5 -- Partition Size :2045 KB Processi 
Analysis Tile is complete, Space usage: 3.62% time: 245 


D3[(used 4Bits] 
D?[used 4Bits] 
D1 fused 4Bits] 
DO 

Saved OME KEY GHOST project to file: CMD 

CLK 

: : Gnd 


ee  r—O if Bus 1 bits, D1IJD2/D3 not used 


pons 
View TCSP Connection | 


Verifing User Area: Succeeded. Time: 54.297 5 -- Partition Size : 3566624 KEL 


= 7 J 1 A = Td 8 | ed el 


| Reading +Verifing Succeeded Total Time: 14M 435 


=_ Po Go fe 2 oo “= oo 





@ The total time for "Read + Verify" the 4G IC is less than 900 seconds. The verification time is particularly short because the 
IC takes up very little space. 
@ Also saved one-key ghost project file, only need to open the project file when copying, the specific method is the same as in 


section 5.8. 


5.9.4 ISP program IC 


*Select IC AUTO EMMC(ISP)_1B_1.8V 
*Open the one-key clone project file read 
Under normal condition, open the project file and program all the data read from EMMC to finish the copy with one key. 
If you don't need to program all the data, please uncheck the option that you don't need to write. 
Another method: After selecting IC, do not use the project file, just select the data folder. Check the area to be 
programmed in the operation options, that is completely set by user 
@® Click [PROG.] button in the toolbar to start programming IC 
Open Project 


File(F) Select IC(S) Project(P) Device(D) Tools(V) 


Pino Wor: Pian 8 Open Project) 








Select IC Save Project(B) 
: Save Project As(S) 
oe Close Project(©) 

Set Interface Project attrib(A) 

© FIF socket Modify Password(K) 
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Open project file: EMMC_GHOST.MPJ 








Be FF Lie 14 
4 « Xgpro » UserData » Emmce_data vl& #2" Emme data" p 
#820 v Prete ea c+ O @ 
mm 5a 4% BFR | (ea BRE ea oh 
+ = ° _| EMMC_Ghost.mpj 2021/1/23 16:28 MPI 344 14 
=] MS < 
=| AR ¢ 
360 SRE 
— Emrme_data 
| IMG2 





| PLUS DATASHE 


i ease 

“B30 He 

@ wea 

©) AR 

es at , 
ap | FO) | | me 








Click [PROG.] on toolbar 


The whole programming process, as shown below, Erase, Program and Verify all partitions with one key. 


Chip Program APP Version: 10.75 


Location in Socket 
MODEL: AU TO EMMC ISP) 1B. 7.8V(recommend) 
eave Log | 


Analysis Tile is complete, Space usage: 3.62% time: 215 Ay 
Programming User Area: Succeeded. Time: 53.734 5% -- Partition Size :Seb6E24 
Programming ELSD Succeeded. Time: 10 ms 

Programming CSD Succeeded. Time: O ms 

Programming 32 bits CheckSum: Ox 46026360 Looe ee 
Verity Restart EMME .... 

Int EMM... OK! [OCR register: COFFSOSO ) 
Veriting CSD Succeeded 


T56 Programmer 


D3[used 4Bits] 
De(used 4Bits] 
Difused 4Bits] 
DO 

CMD 

Gnd 

CLK 

: Gnd 


| Programming EMMC Succeeded if Bus 1 bits, DIJD2/D3 not used 


moos 
View [CSP Connection | Program | BACK | 


Verifing ELSD Succeeded 

Veriting BOOT1 : Succeeded. Time: 0.437 & -- Partition Size :2046 KB Process 
Verifing BOOT? : Succeeded, Time: 0.422 5 -- Partition Size :2046 KB Processi 
Veriting User Area: Succeeded. Time: 30.165 -- Partition Size : 3566624 KEL F 
Programming Veriting Succeeded 32 bits CheckSum: Ox 46D26360 
Programming Successtull Total Time: 1M 26S 


a POO om om ™ co 





[END of EMMC] 
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6. NAND/SPINAND Programming 


156 supports up to 256G bits NAND flash, supports BGA and TSOP packages and SPI NAND 
TL866ll only supports TSOP48 chips with less than 8G bits (1G bytes) capacity 


6.1 Characteristics of NAND FLASH 


NOR Flash randomly accesses all memory maps and dedicated interfaces (such as EPROM) address and data lines. But 
there is no dedicated address line in NAND flash. It is made up of an 8/16-bit wide interface bus that sends commands, 
addresses and data to internal registers, that provides a more flexible configuration for many original chips. The NAND flash 
architecture, emphasis on lower cost per bit, higher performance, and disk can easily upgrade through the interface, NAND is 
lower cost and higher capacity. 

NAND, bad blocks are allowed. Due to the production process of NAND, bad blocks will randomly appear in the factory chip. 
Bad blocks are initialized at the factory and marked as bad blocks in the special area. If bad blocks appear during use, they 
also need to be marked. 

Bit flip: If bit flip occurs on critical files, it will cause the system to hang up. Therefore, while using NAND FLASH, algorithms 
such as ECC/EDC must be used for data correction to ensure reliability. 

There is spare area. Just because NAND FLASH has the above two special features, spare area plays the role of putting bad 
block flags, ECC values, IC information and file information. 

NAND FLASH bad blocks manage: There are many ways to manage bad blocks in NAND FLASH. Different system providers 
may choose different management methods of bad block to meet the needs of product development. The software defines 
three common methods for user to choose from. The software defines three common methods for users to select and use, 


and enables user-defined ECC algorithms for flexible applications. 


6.2 Structure of NAND 


The following figure shows the MT29F4GO8ABAEA as an example: 
MT29F4G08 has 2 Planes *2048 blocks , the programmer is operated in blocks, index number 0-4095 blocks. Each block has 64 


pages , and the processing of each block is separately written to the chip sequentially. 


The size of each page: 2048 bytes (Page size) + 64 bytes (Spare size) = 2112 bytes 
The total capacity of IC is: 2112 * 64 (Page) * 4096 (Block) = 4224MB. 


“Figure 9: Array Organization - MT29F4G08 (x8) 


4—2112 bytes -ee— 27117 bytes —+ 











: ay ——+ 007 
Cache Register 2048 64 70448 6d — poo 
Data Reguter 2048 B44} 2048 ‘BA 
f page «= (2K + 64 bytes) 
+} block = (2K + 64) bytes x 64 pages 
2046 blocks ss 
per plane = (128K + 4K) bytes 
< _ ' 
4056 blocks 1 plane hie K) bytes x 2043 blocks 
per devke 
/ device = 2112Mb x2 planes 
_ : = 4274Mb 
a Cs 
Alane of Plane of 


even-numbered blocks odd-numbered blocks 
(0, 2, 4, 6, ..., 4082, 405.4) {1, 3, 5, fy ay S093, 4055) 
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6.38 NAND Program main interface 


After selecting IC, the software interface is as below: 


“gpro vl0.75 = O * 
File(F) Select IC(S} Project(P) | Device(D} | Tools(v) Help(H) LanguagetL} 
= Read.uik ‘iF = Erase alll A 
tar town Pe save | Borg Ae _ a tan = RAM SE PROG. @asot Ey oy pL ary 
ea 


Select I1¢ —*—> sfho Project opened) 


Verity (4 
MAND ChkSum: Not Used Ti 
| ® 
eee oe pregame) Ox00_O08400000 Bytes 135168 KB AGecu Pro 


Set Interface Erase {E} 


(@* ZIF socket  ICSP por Blank Check(B) ‘c current Imax: [Default | f@ OBits © 16 Bits Save Log | Clear | 
ATBI coe | F [ascn a 
“9 86 68 68 














Address | o | 1 | 2 





Serials Number 





foao-HA7 8: KE Th | TH} 8 AB HAaHD Flash Teco. RETREAT ETHER TERE EEE TERETE ES 
HO58-6036: 86 86 4 Testing 3 860 G8 22 DE AS AZ ...@..°..... Ot ace 1 Programmer Connected. 
HG8-8840- 5H aa h aa ao ao ag CA 78 P a Px TETHER ETHER RETREAT PEPE TREE 
janeunkine Ag Aa A hdulti Prog. "i Ab Ap Ap Ap GF C8 eee Device 1: aGecu T56 Ver: 00.01.37 

7 re SS =" USB POWER VOLTAGE: O4,91¥V 
GH00-H068: B? SA B NAND Bad Block Check O6 OF 4168 82 88 BH .2..... t ckeeeue Woe OEED MODES GS 4cenie 
HHBB-BAT A: ho 8 Lagic IC Test hob 86 686 8 8 Oh ~~... eee eee eee SEE ERE EEE EERE SEAR EEE EERE EERE EEE ESE 
GH00-H088: S4 68 7! 968 $34 34 3A 34 32 Thu Mar 12 14:42 

TY/LCD Toals 

Q@HH0-B8890: 3A 35 3... .. .. _. 8 85 ofA Oe SO SO 54 CST 2815.... PageSize : 2048 
HH88-H6AG: 86 AA 8B AA 8B AA 88 AA OF 6 6 CUB 8S hUOW6 669 OW wee Fib SPareslize : 64 
9600-G6B6: 66 G8 66 61 Al 86 74 FH 1D 22 87 C2 81 G4 66 OF ...... Cee eae delenriae ae ae ae 
GH00-H6CH: 48 69 OF OS 4? 28 68 15 88 88 OB O68 8S 88 88 8B Hi..Be*......... ee ceo - 

; Total Blocks : 102 4 
HHG8-H8D8: 88 88 88 88 O88 88 88 88 10 8 88 88 88 88 108 AF ............. se eos eet a eee 
GH00-H6E8: 61 1B 88 88 4H 26 68 88 10 48 6868 O68 68 68 88 88 a...@ ...@...°.. ee ee 
HHO66-H6FG: 86 88 66 BA 68 66 BF BF 86 66 86 88 66 86 86 BO ..----- eee eeee ncE# Pin : 1 
BHH6-Hi68: 66 86 5H 686 66 86 66 66 86 AA 66 AA 66 AA 86 AA ....~.~-.... eee. nHRBH PIN : 1 
Q@6800-08118: 67 88 BO B88 41 44S 17 22 88 88 88 88 61 86 745 FO ...-AD."....a.t 
G@H80-8128: 73 12 88 SO 81 O48 OA OF 2F 69 84 OS 4? 28 68 15 S..@..../1.-BC" 
GH00-H138: 88 88 OO OO 88 88 8S 88 BO 86 66 O68 68 BH BO O68 .....-..........- 
GH00-0148: 68 88 BO BO 86 O68 18 BF 63 1B O68 66 68 28 BH BH ........ Ci... 


86068-8156: 66 46 66 668 O86 66 66 66 66 86 86 66 66 66 66 66 .B... .......... 
HBG8-6168: 6868 88 86 8B 86 86 86 86 88 86 86 66 88 86 BB BB .-.-------------- 
HbG8-6176: 68 E1 86 86 68 86 86 66 88 868 86 66 88 88 BB BB -..--------------- < > 


Block 0 Unique ID Options Device. Into [=] 
Block aFile; 0 =|] + 5 


Options IC Config Informaton 





Note: click the up and down arrows to browse the data of the previous block or 


I Pin Detect i Check ID the next black 


I Erase before 
[1 verify after Auto SM_NUM 


A 


7 Skip Blank Addr.Range: @ 4LL © Sect 


~S Auto Identi. (ONFI} 


a) 


Default Progranmcer[(l): 4Gecu TS6 | booo 8gog at 


C1] Blank Check Ox | ooooooo00! -> | ooooooo0 


1) Click select button to select IC model 

2) Load and save: data files to load or save to file after reading 

3) <NAND bad block check> function in the menu is only valid for standard bad block markers, for a small amount of specific 
device data, if the bad block marker is not standard, the check result is not accurate, you can ignore it. 

4) Configuration and options: configuration of NAND programming method, see the next section for details: configuration and 
options (for equipment maintenance personnel, generally settings by default, do not need to change) 

5) Data block switch: user browse the data buffer by block, after loading file or reading IC, user can use the software to directly 
browse the data in the set block. 

6) ONFI automatic identification of IC parameters: the IC model not listed in the software, for the NAND chip in line with the ONFI 
standard, the user can use this function to automatically identify the chip parameters, automatically adjust the software 
parameters after identifying. You can read and write directly, and can be saved as a customized IC model, see Chapter 10 Add 


customized IC for details. 
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6.4 NAND Configuration and Options 


Click [Options] button in Figure 4 to enter the programming configuration interface. 


6.4.1 Programming Operation Options 
Settings when reading or programming 


Prog. Speed: if an error occurs during reading or programming, please try to select "Low Speed". 


1. Operation Options 


Erase Before Progranming Prog.Speed: (@ Default: 
[| Not Clear Bad Block Mark when Erase & Low Speed 
Skip Blank (~ High Speed 


Auto Verify after reading or Programing 
[ | Blank Check Before Programming 
id Read Device Unique ID {UID} 


6.4.2 Bit flip Permission 
Set by the required ECC error correction bit, usually set by default, no need to modify. 
Note: When reading or writing to the chip, the NAND will be bit flipped, so the data file read may not be exactly the same every 


time. The file data is valid as long as the auto-verify passed when reading, that means the error data is in allowed range. 


?. Bit Flip Permission 


f° dbite/512B (€° 4bits/512B f° Sbhits/512B f@ 24bits/10241 f° 40bits/10241 


6.4.3 Customize NAND parameters 


The software allows user to set NAND parameters according to the IC data sheet. Theoretically, user can add any NAND IC by 
customize setting, see Chapter 10 Adding Custom IC for details. 
3. Customize HAND parameters 


| | Customise Serting 


Page Size : }a036 | VOC Voltage : |s oy ¥ 
fe OSWel= fap ele| ey | fetes Bus Width : E Bits | 


Pages per Block : 64 | PIN CONFIGURATION : OME 1 aT | 

BlocksPer#CE (Die): 2048 | PACKAGE : ITSsoP48 | 
#CEn (Diej : ft | Internal ECC : [Disable | 
#FPBn Pins : i | Device ID : | aC hc 


Wiew Config Resault | 
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6.4.4 File name/ Path/ Partition Assigned 


4. File name / Path / Block Assigned 


Data access method: (@ Single File Mode ,All Datas 


(~ Single File,Partitions Mode 


(~ Multiple Files and Partitions Calcu. CRC32 
Temporary Buffer Floder: Set Buffer Floder 


D:\Xgpro_T56\UserData\NAND 


PART. ST_BLK END BLK CNT_BLK igvabaly— 


1, Part 1.bin 


\NaND' Part 4.bin 






































AAT 
i 





aa 


6.441 Temporary Buffer Folder 


The folder where temporary files are stored when a single file is accessed. 
NAND files may take up a lot of disk space. Only while the capacity of disk is low, you need to set the folder to another disk, 


normally no changes are needed. 


6.442 Data access method 


@ Single file Mode, all data: all data is from a single buffer file when programming, or stored in single buffer file when reading. , 
generally uses this mode by hard copy. 

@ Single file, partitions mode: data is from a single buffer file (user loaded) when programming, or stored in the buffer file 
when reading. When programming or reading, the data is handled by partition. 
m @ PART: Select the partition to use 
m@ ST_BLK: Start block of partition 
m END _ BLK: End block of partition 
m CNT_BLK: The number of data blocks in the file for current partition (the actual number of data blocks be processed) 
Note: The size of the partition (END _BLK-ST_BLK+1) must be larger than CNT_BLK when setting. 
The next partition memory cannot overlap with the previous partition. 

@ Multiple files and partitions: Partition mode is the same as the above, but each partition uses its own file, which does not 
use the buffer file. 
In mass production, the NAND partition mode is generally used for bad block skipping process, which can be set by user as 


needed, see Bad Block Management for details. 


6.4.5 Set OTP Area 
Only T56 programmer can support OTP 
Some NAND has a special OTP area where data can be written, generally used to store the serial numbers. fixed or 
unchanging data, etc. OTP is the abbreviation of “One Time Programmable’, that means one-time programmable. Once the 
data in this area has been programmed, it cannot be programmed again. 
When reading the original IC, you can check this option, after reading, check whether the OTP data file data is completely 


empty. If there is data, OTP data must be written to the new NAND together when copying. 
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5. Set OTP Area 


D:\Xqpro_TS6\UserData\NAND\ OTP_data.bin 
| O 


OTP data file: Disable or enable OTP 


OTP pages: refers to the maximum number of pages in this area, only the smaller number of pages can be set. 


6.4.6 Spare Area in the File 


6. Spare Area in the File 


‘eo Include Spare drea 


f° none 


Due to the special nature of NAND FLASH, the data file is whether it includes the spare data. 


If not included: _ the file will not include the spare area data 


6.4.7 Bad Block Manage Mode 


3 manage modes for bad block 


f. Bad Block Handle Mode 
(~ Skip Bad Block 
‘oe Hard Coapy 


{° Replace Block &Block# | o 
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6.4.7.1 Skip Bad Block 


If a bad block is found during reading or writing IC, the programmer will skip the bad block. And directly proceed to the next block. 
as below: 
Data file NAND Flash 


Bad Block 


Bad Block 





6.4.7.2 Hard Copy 


Force data reads or writes regardless of whether the block is marked with a bad block or not. If the verifying displays error during 


writing, programming will be stopped. This method is generally used for technical maintenance when replacing memory chips. 


6.4.7.3. Replace Bad Block 


Bad blocks are found to be written to the beginning of a specific block set, that allows the system to logically feel that the memory 
is still a contiguous area, and is generally used in partitioning mode. 
See detailed instructions in the example configuration as below. The number type in the start block (example: 900) is the actual 


replacement block index that is written to FLASH when the bad block is found. 


6.4.7.4 Enable user-defined algorithm file 


In the customized algorithm DLL file, before programming user can perform data processing or automatic sequence number 
calculation for any data in the block, as well as perform ECC algorithms, etc. It is also possible to auto-fill the BBT table with data 
according to the skipped bad blocks during programming. 


For details, please contact us and we can customize it according to your requirements. 


6.4.8 Configuration Example 1 (MT29F1GO8ABAEA) 


Operation method: single file, partitions mode, skip bad block 
1) program NAND FLASH with partition 


2) bad block processing mode: skip bad block 
3) File data: file includes spare area data. 
4) Use 2 partitions: 


The first partition: from 0# to199#, a total of 200 blocks, the actual length of the written data is 10 blocks 
The second partition: from 1000# to 1023#, a total of 24 blocks, the actual length of written data is 5 blocks 
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After the above settings, you can start programming. The results of the operation are shown in Table 1-2. 

If the length of the buffer file is not enough, the programming is terminated. 

If the buffer file length exceeds the length of the BLOCK (Total 15 blocks) data to be written, the programming is terminated. 


The configuration interface is shown as below: 


4. File name / Path / Block Assigned 








Data access method: Single File Mode ,41l Datas 
Multiple Files and Partitions Calcu. CRC32 | 
Temporary Buffer Floder: Set Buffer Floder | 











ST BLK 

; oo HEY, _T56\ UserData\NAND\ Part _1.bin 

2 [ 1000 — ; 5 ps _T56\UserData\NAND\ Part 2.bin 

(_ 3 a UW ay AQGpro_ 26), UserData\ NAND) ‘art 3 ~O1n 
[| 4 | oo | | oo | j oo D: ) T56\ UserData’NAaND'\ Par t_4.bin [-] 
[| 5 ; oo j oo ; oo D:\Xgpro_T56\UserData\NAND\ Part 5.bin i 
[]«6[ o [ 0 [0 © fo:\xopro_TSé\UserData\NAND\Part_6.bin [=] 
[]7] o [ 9 [0 © f:\xepro_TSé\UserData\NAND\Part_7.bin [=] 
[]e J oo ; oo ; oo D:\Xgpro T56\UserData\NAND\ Part 8.bin zy 


Table 1-2: Programming Process diagram 


Buffer File NAND Flash 


0# Block 


2112 x64 bytes 1#.....6# block 
*6 blocks 


2112 x64 bytes 


2112 x64 bytes 8# block 
10# 10 blocks end 


File Start 


Notes: 
In this configuration example, when reading or verifying, it is also done by partition 
1. Read 10 Blocks of partition 1 and save it to the file 
2. Read 5 Blocks of partition 2 and save them to the file 
3. Read finish. 
By setting partitions flexibly, you can individually read or write data of one or more blocks. 
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6.4.9 Configuration Example 2 (K9F1208U0C) 


Operation method: multiple files, partitions mode, replace bad blocks 
K9F1208U0C parameter: 
IC capacity: (512+16)*32*4096 blocks 
Page Size: 512 bytes 
Spare size: 16 bytes 
Pages Per Block : 32 pages 
Block Size : 4096 


) Use partition table to write NAND FLASH 

2) Bad block handle mode: replace block, if bad blocks are found, write to block 4000# start position 

) File data: includes spare area 

) Use 2 partitions, 
The first partition: from 1# to 1000#, a total of 1000 blocks, the actual length of the written data is 100 blocks 
The second partition: from 2000# to 3999#, a total of 1000 blocks, the actual length of written data is 3 blocks 

5) The written data file is: PART _1.BIN Partition 1 

PART 2.BIN Partition 2. 


6) Programming process is shown in Table 1-3. 


4. File name / Path / Block Assigned 


Data access method: (~ Single File Mode ,All Datas 


Single File,Partitions Mode 


(@ Multiple Files and Partitions Calcu. CRC32 | 


Temporary Buffer Floder: 
D:\Xgpro_T56\ UserData\NAND 


ST_BLK END BLK CNT_BLK wal al 


1000 100 © [D:\Xgpro_TS5é6\UserData\NAND\Part_1.bin  —., 

D:\Xgpro_T56\UserData\NAND\ Part 3.bin x 
| 
| 


— 
[3589 





[D:\Xgpro_TS6\ UserData\NAND\ Part 7.bin a 
D:\Xgpro_TS6\ UserData\NAND\ Part 8.bin 


aCEReEE 


f. Bad Block Handle Mode 


{° Skip Bad Block 


Hard Cop 


(@ Replace Block HBlock# | 4000 
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File (512+16)x32bytes NAND Flash 














File:Part_1 
528x32 bytes 
528x32 bytes 


528x32 bytes 
528x382 bytes  \7~-~ _ 
528x32 bytes 


528x32 bytes 
528x32 bytes 


6.5 Program NAND through ISP 


ISP programming only supports SPI NAND IC, select X1 mode, check option <ICSP port> to program. ISP programming process is 
no different from using adapter. Do not separate the three wires, while connect the two GND lines and CLK clock lines. 


6.6 Save project file 


For all configuration parameters, you can "Save Project" to project file. When use it again, just open the project file and you can 
directly program. It is suitable for mass production. 
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6.7 NAND Flash Copy From Original Chip 
6.7.1 Notes: 


In repairing equipment, we often need to read out data from an original chip, copy it to another new chip, and then solder it to 


the board. To ensure that the chip can work properly, users need to pay attention to the following points: 


de 


Copy chip configuration: Use the default settings of the programmer software. 

Option settings: must use hard copy, the data in the file must include spare area, all other options are not checked by 
default. When reading by this mode, the programmer can read the entire contents of the chip (including the contents of 
the bad block) to the file. 

Some NAND FLASH chips have the unique ID. Embedded system applications may read the unique ID of the chip and 
perform encryption operations in the program, because the unique ID is set by the chip manufactory at the factory and 
cannot be changed or copied. In this case, even if you have copied all the contents of the chip correctly (including the 
OTP contents), it will not work properly after replacing with the new chip. 

For example: MT29F4GO08ABAEA has the unique ID (16+16 Bytes) , which can only be read, cannot be rewritten. 

If the application is encrypted by this method, it cannot be replaced with the new chip unless you can modify the 
software of the embedded system. 

OTP Area (OTP One-Time Programmable Storage Area) 

OTP Area only exists on some NAND Flash chips, please check the IC data sheet for details. 

For example: MT29F4GO8ABAEA has the OTP data of 30 pages (30Pages*2112 bytes). When reading, you should read 
the OTP content at the same time. Check whether the OTP file is completely empty (FF), if there is OTP data, you need 


to write OTP at the same time when programming. Only T56 can support reading and writing OTP data. 


Read the OTP content, as shown below: 


4. Set OTP Area 


iw Read or Progranmniing OTP area 


| OTP PROTECTED a@fter Programmi select OTP data file | 
D:\Xgpro\ UserData\NAND\ OTP_data.bin 
OTP Pages Per Die : | a0 


6.7.2 Configuration and options 


Default settings: hard copy, single file mode all data, Includes Spare Area (OOB) 


6. Spare Area in the File f. Bad Block Handle Mode 
‘oe Include Spare frea « akip Bad Block 
ts none c} Hard Copy 


(" Replace Block &Block# | O 
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6.7.3 Read the original chip and save 
Click [Read] button in the toolbar to start reading the chip, as follows: 


Chip Read APP Version: 10.75 


Location in Socket 
MODEL: | MT 29F1G08ABAEAWP TSOP48_DIP48 


Use Adapter: TSOP48 DIF4é Save Log | 


Pins Detected Passed! 

ID: Ox 20 FA 

D:Calcu available dick capacity: 199 GB 

Reading Nand Flash: Succeeded. Time: 16.436 5 -- Flash Size :1355166 KB 
Reading Nand OTP: Succeeded. Time: 0.062 5 -- OTP Size :61 KB 

Data was saved tothe file: DodgproWserbataiNANDvTP_data.bin 
Verifing Mand Flash : Succeeded. Time: 0.672 5 -- Flash Size :135165 KB 
Veriting Nand OTP: Succeeded. Time: 0.0155 -- OTP Size :61 KB 

Verifing Succeeded 


xq, 


Read and Verify by one key 


| Reading + Venfing Succeeded 


moos LT 
View Adpter | Read | BACE | 


Exit the Read dialog box, Click [Save] button in the toolbar to save flash to a new file 


6.7.46. Copy new chip 


Selecting correct IC model, and [Load] the data file 


www.XGECU.com 





Put on the new chip to the socket, click [PROG.] button in the toolbar, the following interface will pop up: click the [PROG.] button 


to start programming. 


(Chip Program APP Version: 10.75 


Location in Socket 
MODEL: | MT29F1G0sABAEAWP TSOP48_DIP48 


Use Adapter: TSOP48 DIP4é Save Log | 


Pins Detected Paszed! 


Erase MAND Flash : Succeeded. Time: 2156 ms 

Programming Mand Flash ... 

By tter File Size: 135768K6 

Programming Nand Flash: Succeeded. Time: 0.626 5 -- Flash Size :135165 KB 
Programming Mand OTP : Succeeded. Time: 0.000 5 -- OTP Size :61 KB 
Veriting Mand Flash : Succeeded. Time: 0.436 5 -- Flash Size :1355165 KB 
Verifing Mand OTP: Succeeded. Time: 0.0155 -- OTP Size :61 KB 

Veriting completed 


Erase/Program/Verify 


| Prozranuning + Venting Succeeded 


oo 
View Adpter | Program | BACE | 
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Notes: 


1. 


It is possible that the speed of programming the chip is faster than reading, because the software automatically skips the 
content of the empty data during programming. 

In the process of reading, erasing, or programming, if chip has bad blocks, the tip will appear, but it does not affect the 
programming of the chip. 

It is not necessary to check the bad block before copying. As long as the verifying is correct and there is no error when 
programming, the new copied chip will be available. If there is a bad block in the new chip, the software will skip writing if the 
bad block is empty data when copying. If the new chip has a bad block, and the original chip has data to be written to the 
location of this bad block, the data can’t be written into this bad block, the programming error will occur. Please replace with 
another new chip, (the location of the new chip bad block is generally random). 


Repairers usually do not know how to deal with bad blocks, so only copy directly with hard copy mode. 


6.8 NAND internal ECC setting 


Notes: (ECC option is disabled for chips without ECC function) 


1; 


oe a ly 


All ECC is enabled by default, if you want, you can uncheck the option. 

Enable Internal ECC is the best choice, high reliability, the data read every time is the same, there is no bit flipping. 
Enable ECC Read+ Enable ECC Write, (same reliability as the original chip) 

Enable ECC Read + Disable ECC write 
Disable ECC Read + Enable ECC write (don’t use this method) 

Disable ECC Reading + Disable ECC writing, the probability of flipping is twice as high as the third method, and the possibility 


(data may be flipped, less reliable than original chip data) 


of error is greater, and the reliability is worse than that of the original chip data. 
Chip has internal ECC correction, but the device does not use internal ECC correction, Must disable internal ECC when 
reading or writing. This situation should be rare, if reading and writing via enabled ECC, the chip does not work normally, test 


with [disable ECC read + disable ECC write]. ECC function switching is shown in the following figure: 


3. Customize MAND parameters 


BlocksPer#CE (Die): 


| Customize Setting 


Page Size : 2048 | Yoo Voltage : a Oy - 
spare Size : |isze Bus Width : E Bits | 


Pages per Block : PIM CONFIGURATION : 


| ONF 1 aTD | 
| WSOM6 | 
Internal ECC : Enable | 
a ee 


PACEAGE : 
#CEn (Die) : 


#FREn Fins Device ID : 


Yiew Conftigq FResault | 


6.9 Calculation of NAND file address 


Calculated in two cases: 


File includes Spare Area 
The location of the data in the file = n Block x ( Page Size + Spare Size ) x the number of pages per block 
File does not include Spare Area 


Location of data in the file = n Block x Page Size x the number of pages per block 
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7. VGA_HDMIISP and Tools 


Only T56 programmer can support this function 


7.1. VGA_HDMI ISP wiring diagram 


Use the VGA_HDMI adapter to connect a VGA cable or HDMI cable, or ISP cable to the TV motherboard. When in-circuit 
programming, the TV motherboard is normally required to be in standby mode and to use external power supply. 

General wiring diagram as below: 

According to the requirements of the motherboard, VGA in-circuit programming can be used in a variety of ways to connect. T56 


can automatically recognize the hardware connection, do not need to make any settings in the software. 


XKGecu ” VGA to USB3.0/USB2.0 
VGA/HDMI ISP 


ARMA KPa 






HDMI 


VGA 





ere eee eee a ee 
eee een eeceeene® 







To 3. 5mm/2. 5mm Headset 








Co GND 
n Hrs, ——RX/SDA 
caeenoeat —TX/SCL 


Lornrnec! Mect 10 ise 
‘ LC noe cd 
___ Net Connect 





i} 


SN-ADP-VGA 


Connection photo via VGA cable 
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Connection photo via ISP: 
GND -->VGA 10# or VGAshell / SDA-->VGA12# / CLK -->VGA 15# 





7.2 VGA_HDMI in-circuit programming 


Note: VGA in-circuit programming 25 FLASH, currently only support MSTAR part of the motherboard, in the subsequent update will 
be gradually improved 
Connected to the motherboard, power supply to the motherboard, keep TV in standby state 


7.2.1 Auto-identify Chip 
Click [AUTO] button, the dialog box will pop up, select VGA _HDMI_ISP port. 
Click [Detect] button to automatically find the chip model and select the chip 
Xgpro v1075 
File(F) Select ICfS) Project(P) Device(D) Tools HelpfH} LanguagetLi 
tar LAD ed Save | im AD uae Joa oF F ann RAM Ea [PE 


Select IC ‘ IC Information(No Project opened) ———————- 
ChipType: VG& HDMI ChkSum: Ox20BE 6&co9 
se ee eae bd IC Size: Ox400000 Bytes ( 4194504 Bytes | 


Aute Search 25 Flash or VGA HDMI_ISP 








Tunction desorption Location In Socket 


Oni tor 616 Pins or VOWA HOW ISP 25senes large 
capacity Flash Wlernony. after detecting completely, Push = 
select > button to automatic selection 


% ®) 
Pin Counts or Vo HDMI ISP Cecu 

7 - SN-ADP-VGA 
( # Ping 
€ 16 Pins 


@ VGA HDMI ISP 


tink & 


1 Nlodel with the same TD was found 
please select one 


tt# tte ep ete ee SF 


RS Fe eS 


18P-TTL-Port 


Model: [usTar MST EXT Weoq3¢ @ISP Vea | 


MSTAR NST ExT WetQse¢ GISP VGA 


Wlanuftactory 


Select | Cancel | 
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7.2.2 In-circuit Read chip data 
Click [Read] button, the read dialog box pops up, click [Read] 


When reading, it will nae find the motherboard communication port and protocol to enter SPI mode. 


AD ec oe e,.. | (Ra) 


Ic In ey] Project opened) —— A 
ChipType: VG& HOMI = ChkSum: Ox20BE 6cog 
2 zee ves | WGA eis 
IC Size: Ox400000 Bytes { 41943504 Bytes 3 


Chip Read APP Version: 10.75 


Read Range MST EXT W25Q32 
[wv FLASH Start Adr: — -------- EndAdr: 9 ------- 


— — 


+an | RAM @° {PRoG.} [PROG.} ‘: F ABOUT EA... 





Location in Socket 





ACecu 


oN-ADP-VGA 





== F 


Use Adapter:SN-ADP-VGA 
| Read arccessfirl | Save Log | 





Start search VGA _HDMIL_ISP port... 
Respond Moral at Port: Vs, (SO4-=PIN12 SCL-=PIN1 5) 
Enter SPI mode... successful 

Device ID: EF 4016 

Reading FLASH ...succeeded. Time : 139156ms 


_ sz 
Read Finishect! Win ee 


ftiactrhep ae oe ef 


chert eke ee |e & 





Read time 137 seconds, click [Back], please [Save] the data 


7.2.3 VGA in-circuit programming 


Click [LOAD] in the tool bar to load the data file to be written, as shown in the following figure: 


Bl Xgpro v10.75 
File(F) Select IC(S) Project(P) Device(D) Tools Help(H) LanguagetLi 





= 2 a = Erase 
= bad save | 2.00 Whee Janne Peau Fin RAM OE 

|) 6 - Select IC IC Information(No Project opened) 

| ChipTyoe: VGS HOMI ChkSum: Ox20BE 6co 
: BET E vied dee. on | IC Sie: O40 Bytes ( 4194304 Bytes 


Baba 
» (2 > RIG > ey 


* 


wT 111.BIN 201 8/7/16 12:54 

* 222.BIN 2019/4/19 17:51 

we 223,.BIN 2019/5/8 1114 

* AM29L49 28.B1N 2019/2/25 943 

| = i aM : 2018/6135 9:06 
| 2021 1/30 14:24 
2019/39/25 10:23 


| 
| co pena “BRR 


rm mm mm rm mm mM fo 


< 





open —> 


Xgpro Software User Guide —T56/TL866ll www.XGECU.com 


After loading the file, click [PROG.] in the toolbar to bring up the programming dialog box. Click [Program] to start programming, as 
shown in the following figure: 


Chip Program APP Version: 10.75 


Program Farge | MST EXT _ W25032 Location in Socket 


jw FLASH Start Adr: = OOO000000 End Ade: QO3FFFFF 


ACecu ® 


Use Adapter:SN-ADP-VGA SN-ADP-VGA 


| Programinung .).Succeeded Save Log | 


Start search VGA _HDMI_LISP port... 

Respond Moral at Port: VGA (SDA4-=PIN12 SCL-=PIN1 5S) 
Enter =Pl mode... successtul 

Device ID: EF 4016 

Erase ...Succeeded. Time: 7.046 5 

Programming FLASH succeeded. Time : 120047m= eecenwed 
Veriting FLASH ...Succeeded. Time : 133218ms 

Programming ...succeeded 


ttihteenadee & & £ 


Pre PRPC ERS ES 


Erase/Program/Verify by one key 


eS eee 


View Adpter | [Progam | BACE | 





The whole programming process is completed 


7.38 EDID Programming 


Connect TV or monitor, click [Select IC] button, in the search device, type in “EDID”. 
Select EDID_256B @ISP_VGA, as shown below: 


Search Device Manufactory ~ Device 


EDID EDID 128B @ISP ¥Ga 
OTHERS : FF 








Type 

(@ ALL 

(~ ROM/FLASH/NVRAM 
(~ MCU/MPU 

(~ PLD/GAL/CPLD 

(~ SRAM/NVRAM 

(~ NAND 

(~ EMMC/EMCP 

(~ VGA/HDMI 








semiconductor 











MStar Semiconductor IC Total: 26022 


cme 


After selecting, you can read, modify, program and verify the EDID. 


The operation method is exactly the same as ordinary FLASH chips, so not describe here. 
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7.4 TV Tools: Serial Printing 


Connect the TV board, click the icon—_==_ 





TY 
in the upper right corner 


Click the [Serial Print] button and T56 will get started to receive power-on diagnostic information from the TV board. 


Turn on the TV power switch. The power-on information will be displayed on the screen, you can click [Save Log] to save. 


The line sequence is auto found by default, do not need to select it manually. 


Baud rate is 115200bps by default, please switch the baud rate if there is a messy code, as follows: 


Information 





Wote: 
1. VGA / HDMI / ISP port can be found automatically 
2. You Can connect Any one port to operate 

y jo. Click <View adapter> to See more possible connection 
4, Please switch Haud rate if there i838 garbled code wher 
[PORT: 5] 
User termination! 


< 


— Select Lines of Serials Pork 


=) 


AUTO 
:¥GS [RXD-212,TXD-215] 
VGA [RXD-215,THD-212] 
VGA [RXD-> 4,THD-211] 

: VGA [RXD-211,THD-> 4] 

» HDMI [RXD- 216, TXD-215] 
HDMI [RXD-215,TXD->16] 
ISP [RXD-> 5,TXD-> 3] 
ISP [RXD-> 3,TD-> 5] 


JO OO O 9 OO 
on om Om Be ow hoe 


| Read Monitor/TyY Parameter | Serial Print | BACK | 


Save Log | Clear | 


-Fig. Adapter — 


KGecu ® L 

a - r 
* * SN-ADP-VGA 
rs ri 1 
. i 
= - 
. * 
* + 
* . 
+ * 
= = 
= = 
* = 
* ©. 

ISP-TTL-Port 

fi} 





Baud Rates - 


Display Resultion |WGa: 640x460 -60HZ 
(@ 115200 Bits/s nl | ‘ | 
C S600 Bits!5 Color Pattern vert ical Color Bar | 


(" 38400 Bits/!s 


(> 9600 Bits/'s 


View Odapter | Video Signal Start | 





Click [STOP] button to stop receiving messages. 


7.5 TV tools: read monitor or TV parameters 


Connect TV or monitor, power standby state. 


T¥ 


Click onthe icon = inthe upper right corner, as below, 


click on [Read Monitor/TV Parameter] 


Show as follow: 
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ITV ‘LCD Monitor Tools 


Information 


Read EDID [(EDID) on Port: VYGi 
EDID Length : 128 Bytes 


Monitor Descriptor and Vendor information 
SN: WJ11640002969 

NAME: 323E7QJ5 

Manufacturer Name: PHL 

Product Code: C12? 

Serial Number: 01010101 

Week of Manufacture: 40 

Year of Manufacture: 2016 

EDID Structure Version : 1.3 


Basic Display Parameters and Features 
Video Input Signal Type: Analog 

Max Horz Size (in cm): 70 

Max Vert Size (in cm): 39 

Gamma Value: 2.20 





* Select Lines of Serials Port Baud Rates 


(* AUTO 

@ 1: ¥GA4 [RXD->12,TXD->15] 
{ | © 2: ¥GA[RXD->15,TXD->12] 
© 3: VGA [RXD-> 4,TXD->11] 

| | © 4: VGA [RXD->11,TXD-> 4] 
: © 5: HDMI [RXD->16, TXD->15] 
© 6: HDMI [RXD->15,TXD->16] 
© 7: ISP [RXD-> 5,TXD-> 3] 

© 8: ISP [RXD-> 3, TXD-> 5] 


@ 115200 Bits/S 
57600 Bits/s 
© 38400 Bits/s 
© 9600 Bits/S 























TV Parameter 





View Adapter | 
Read Monitor/TV Parameter | 


Save Log | Clear | 





Fig. Adapter 


xGecu ® 
SN-ADP-VGA 


ad 
> 
« 
* 
> 
+ 
~ 
> 
o 
x 
' 
2 
a 


eve ereeeeeree 


ISP-TTL-Port 











> 


Display Resuttion | HDMI: 1280x720P -60HZ | 
Color Pattern [ert ical Color Bar | 








Video Signal Start | 









Serial Print | BACK | 








T T 


7.6 TV tools: HDMI, VGA video test signal 


Video test signal connection, you must use the T56 special SN-ADP-VGA adapter to connect VGA or HDMI 


Click the icon “= 
signal will be out. 
TV/LOD Monitor Tools 


Information 


Wote: 


Save Log | Clear | 


Fig. Adapter 


1. Voi ; HDMI / ISP port can be found automatically 
2. You can connect any one port to operate 
3. Click <VYiew adapter> to see more possible connection 


4. Please switch baud rate if there is garbled code wher 


[PORT: 5] 
User termination! 
[PORT: 5] 
User termination! 


< 


Select Lines of Serials Port 4 


f AUTO 

1: ¥G4 [RXD->12,TXD-215] 
( 2: ¥G4 [RXD->15,THD->12] 
(3: G8 [RXD-> 4, TXD->11) 
( 4: ¥Gd8 [RXD->11,TXD-> 4] 
( 5: HDMI [RED->16,TXD->15] 
( 6: HDMI [R¥D->15,TXD->16] 
(7: 15P [RXD-> 5, THD-> 3] 

& 8: ISP [RXD-> 3,THD-> 5] 


Baud Rates 


Click [STOP] and back 


f@ 115200 Bits/5 
( 57600 Bits!s 
( 38400 Bits!s 
9600 Bits!s 


View Adapter | 


Video is oukputting...{Ik may take a Few seconds For the display to respond) 


Read Monitor/TY Parameter | Serial Print | STOP 


Ski ack hep eee ee 
FR te ee R ER ES EE 


Display Resultion |HIMI: 1260x720P 


www.XGECU.com 


in the upper right corner of the window, click [Video Signal Start] button, various kinds of VGA or HDMI 


XACecu ® 


SN-ADP-VGA 


1SP-TTL-Port 


—60He 


Color Pattern |Wertical Color Bar 
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8. Automatic Identification 


The automatic-identificatiom is for the SPI 25 series flash. Realize fast selection of 25 norflash chips. 
Identification interface: 8-pin and 16-pin chip on the ZIF socket, T56 supports VGA_HDMI ISP interface 


8.1 ZIF Socket Identification 


A, 
Click the [AUTO] icon Pano button in the toolbar, as shown below: 














Eel 

File(F) Select IC(Q ‘giect(P) Device(D) Tools(v) Help(H) Language(L) 

~ = 7 4 

lay LAD bel set | auto AD mex BP an — [READ] ann) RAM w EB {PRoG.} o Rano Bc: pL&yy 











Select IC 


[[iresricnsanonecenmers orm | MT29F 1GO1A4BAFDWB(x4 )(NW872) @PDFNS _rasrico.aBarowe(ea)(nwe72) erome | |) 


Set Interface 


(* ZIF socket © ICSP pl Auto Search 25 Flash or VGA | DMI SP Save Log | Clear | 





IC Information(No Project opened) 


ChipType: NAND ChkSum: Not Used 
IC Size; Ox00_08800000 Bytes 139264 KB XG ec us pr © 









































function descnption Location In Socket 
Only for 8/16 Pins or VGA HDMI ISP 25series large RRR ERRREEATRRRETAEREREEATEEEEASE 
3. Customize NAND par; °P8city Flash Memory. after detecting completely, Push < Programmer Connected. 
. Select > button to automatic selection KRERKRKRERERKRREERKRERREREEEEEEETE 
[ Customize Settri evice 1: XGecu T56 Ver: 00.01.37 
Pin Counts or VGA_HDMI_ISP USB POWER VOLTAGE: 04.91¥ 
Page Size @ 2 Pins USB SPEED MODE: HS 480MHZ 
7 16 Pi FREER 
ins 
Spare Size 
C 
¥GA_HDWi1_ISP PagesSize : 2046 
Pages per Block ; i : 
abies 12 Model with the same ID was found ee ot 
: lease select one oe oases 
BlocksPer#CE (Die) |? Blocks Size : 128KB + 8KB 
Total Blocks : 1024 
#CEn (Die) Device Size : 128MB + 8192KB 
. Bus Width : 6 
ybba Pins Model: |CFEON § ENZSTsO bo ncE# Pin: 1 
Manufactory | nRB# PIN : d. 
Vit | 
sit | ewe || 
4. File name / Path / Ble 
Data access method: @ Single File Mode ,All Datas 
C Single File,Partitions Mode a 
< > 





i 
Block 0 | Unique ID Options 2 
es p Block ari; 0 a 














Options -IC Config Informaton 
Note: click the up and down arrows to browse the data of the previous block or 

l¥ Pin Detect I¥ Check ID Hee meat Klock 

Le 

a =} a |_ NUM 

a Cr e:@ A Cc 

[iB -> 

CO 

Ready Default Programmer(1): XGecu T56 oood O000 
, TT | iba | T 


@ Select 8-pin or 16-pin chip 
@ Click [Detect], if the chip is recognized, the list of chip with the same ID will be displayed, select the appropriate one 
@ Click [Select] button in the dialog box, selecting IC is finished, next to reading or programming 


8.2 VGA_HDMI In-circuit Identification 


A 
Click [AUTO] icon 7 *"""__ button in the toolbar to check "the VGA_HDMI ISP" interface. 
For details, see: Chapter 7 VGA_HDMI ISP in-circuit programming. 
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9.Digital Logic IC Testing 


Functions: 
@ Test 54/74 series, CD4xxx digital logic chips, test results positioned to the pin. Adjustable VCC voltage. 
@ Automatically identify the logic chip. 


@ User-defined test vectors. 


9.1 Test Logic Chip 








p41 a} 


Click [Logic Test] icon in the toolbar to bring up the test dialog box, as below: 


Logic Test 


Search: Vector Symbol definition IC Position 


O: Input Low 

1: Input High 

L: Quek Low 

H: Gut High 

©: Pulse Input 

&! High Impedance 
Oi High or 35 

a. ignore 

(a: GND 


Export 


Irniport | 


MEW | DELETE | EDIT | COPY | 
LINE 


Norrrial O00 
Morrral on04 
Normal o005 
Normal o006 
Normal oon? 
Norrrial o008 
Normal result oo09 
Normal 0010 
Normal O011 
4ll Vector Testing Normal 


vector Table and Tesk Result TEST Auto Find | 


After selecting IC model, directly click [TEST] button to see the test results of the chip vector 


i 


Ss 


soocccco|a| 
AAAAAAAAa|a 
= 
iS 
a 
a 
= 
ac«cnccacca|a] 


ror I Mm erm I MH 
PoP Pl Pa Pa Pe Pe PJ 
IT me me me mem OO Pe 
me OO Pf] Pl) Pl Py Ga ee re 
Hl Pl Pal Pl Pe Pe Pe Pe = 
aan oi a ooo 
PJP Pe Pe Pl Pe Pe Pe 
ror Pa fu 2D tr - 2 
PJ Py PJ Pe Oo Ce re e+ 
PJ Pye Oo Pl Py) Ge or or 





VCC voltage is variable 
Click the [NEW] or [COPY] button to add a new customized chip 


The customized chips can be imported or exported for sharing. You can also delete or modify. 
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9.2 Customize the logic chip 


Click [NEW] or [COPY] button to edit the logic test vector table, As figure shows: 











New logic Device 


Yector Table 





Pins ¥Yector Set 








lo | 1 
[i ~] 2 
1k 3 
1k 4 
L * 5 
1 i 6 
L ii f 
G y;Cig 





Vector Symbol Define 


IC Model; 0: Input Low 


: 1: Input High 
Pins Counter: {16 v Li: on og 


H: Out High ; 
¥CC Yoltage: |5.0¥ + C: Pulse Input Delete Line | 


2: High Impedance 


OC High or 35 ie 
%: Ignore Modify Line | 


G: GND 


a New Line | 




















Save New | Back, | 





Modify and add the test vector table. then type in the new chip model and save the new. 


9.3 Logic chip identification 


Put the chip in the ZIF socket of the programmer and click [Auto Find] , the logic matching chip model will be listed automatically, 


as below: 


Logic Test 








Vector Symbol definition -IC Position - 


0; Input Low 

1: Input High 

L: Out Low 

H: Out High 

C: Pulse Input 

2: High Impedance 
OC High or 35 

*%: Ignore 

G: GND 

Vi ¥OC 








—¥CC VOLTAGE 
@ S.ov 
C 3.3¥ 


 2.5¥ 
™ 1,.8¥ 


Export | 
v Import | 


NEW | DELETE | EDIT | COPY | 


logic matched 
logic matched 
Found 2 logic chips matched 




















TtemtIC Model 





Vector Table and Test Result S Auto Find BACK | , 
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10. Add customized chips 


@ For chips that are not in the software support list, there are many chips that may have programming algorithms fully 


compatible with one of the chips in the list. In this case, you can add them to the custom list after the test is normal, so that 


you can easily use them later or export the list to share. 


@  Forchips that the software support parameter setting, such as NAND, 27C and other series, various parameters can be set by 


user. The user can change the parameter settings, add it to user list after getting the programming test to pass. 


@ New customized chips can also be used as favorites of commonly used chips. 


10.1 The common method of adding chips 


The same type of chips may be the same programming algorithms exactly . But in general due to different manufactories, the 


identification ID of the chip is different, at this time, just select the compatible chip model, uncheck the option [check ID] to read 


and write for test. 


10.1.1 Test algorithm 
For example: XM25QH32B (assume, this chip is not in the support list) 


We can select the same type of chip W25Q32BV for testing, as below: 


2.load file 
File (Fy Select IC(3) Project(P) Device(D) Tools(t¥) Help(H) Languagetl) 


[1a 1010 |e sae | Sine ADL ance BE aan (ear Fam i fa] Gree) gy ee Eh acy ee 





Select IC 


Set Interface 
() FIF socket 


OQ icsa" 





Address | | a 


8666-6608: 
HH68-6618: 
HHB8- 6828: 
HA68- 8838: 
H666- 6648: 
HH66-6658: 
HHH8- 8868: 
HH68- 6678: 
HHH8-G8b88: 
HH66-8698: 
H868-86A8: 
H860- 8668: 
HH68-88C8: 
HH68- 8808: 
H666-86E8: 
HH60-86F 8: 
8666-61608: 
AAA A441 - 


FLASH 
Qptions 
i Pin Detect 
iw Erase before 
if Verify after 
Ivf Skip Blank 
| Blank Check 


Ready 


78 8C 
6D 8F 
SF AF 
FH 7D 
H8 4A 
CA A? 
9B 45 
22 95 
2 688 
276 DG 
223 30 
EE DF 
66 68 
B1 4A 
a4 #5 
94 9A 
BS $A 
AeA 


STATUS 


IC Information(No Project opened) 


Pg |)) chipType: EEPROM ChkSum: Ox1FE1 D480 A.pr oor amming a) ae 
W25032BV @So1ce 7 select hd cee Ox400000 Bytes { 4194204 Bytes } XGecu~ Pro 


Save Log | _Clear_| 
~ Program Range W25Q392BV ) Location in Socket 


Iw FLASH “tart ghd oooooood ; OO3FFFFF Ce 
1 Prograrnier Connected. 
i STATUS REG COC ee 


Device 1: SGecu T56 Yer: OO.01., 
USE POWER VOLTAGE: 04,.89y 
USH SPEED MODE: HS 460MH2 


CTT Tree rere rrr rrr rer tres 


Use Adapter: SO/IC8 <-> DIP 
Programming |. Succeeded Save Log | 


Pine Detected Pazsedt! 

Erase ... Succeeded. Time: 9.5795 

Protection Disable......K! 

Programming FLASH ...Succeeded. Time : 12016ms 
Verifing FLASH ...Succeeded. Time : 237 3ms 
Programming STATUS REG ...Succeeded. Time : Ome 
Verifing STATUS REG Succeeded. Time : Ome 
Programming ...Succeeded 


5.Erase/Program/Verify Pe 


W25032BY @S0Icé 
Memory Sise : Oxodo400000 





[SEs 
View Adpter | BACK | ZIFA8 





= 


check 10 4 Off-protect before programming Status register Bytes: OxOU Ox02 


3.disable ID SPI clock frequency: [16.0 MHz ~| 


| Auto SN_NUM 
Addr. Range: ALL f° Sect 


Ox | oo000000) -- OIOSFFFFF 


[Reduce clock frequency if using clip or with ISP port] 





Default Programnmer[(li: #Gecu T56é | ooo goo00 


As the above, the test is completed, that means the chip is programmed correctly by selecting W25Q32B. 
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STEP: 
) Select IC W25Q32BV 
) Load a data file 
3) Uncheck the option [check ID] 
) program for testing 
) Erase, write and verify completed, if testing is correct, you can go to the next step. If it failed, you can select another 


similar chips for testing. 


10.1.2 Read ID and add the chip model 


As shown below: 


Gal Xgpro v10 1.check ID 
File(F) Select IC(S) Project(P) Device(D) Toolsiv) Help(H) Language(L) 3. Add new 


7a r ‘ 
1010 WAS | Def rr Sane Err i (toon B., 


Select IC IC Information(No Project opened} 
ChipType: EEPROM ChkSum: Ox1FE1 0480 bass ®) 
| uae eee eA a esta e| [ec Size: _O4 00000 Bytes ( 4194304 Bytes } AGecu Pro 
Save Log | Clear | 
CC 
XMZ5QH32B @SOIC8 Refrence: [wosqazev =~ 
ranmer Connected. 


pL" 











User-defined IC list 





Mevcizea ADIP2S SoS THONSO 

EFOGAGOSUCE BTSOP45 o AMS UNG Ce ERE EEE ETRE EEE EES 
XMZ5OH32B SOIC SMC ee 2 b 1: EGecu T56 Ver: oo. 
MZ 7C1Z8h ADIPZS SG THOMSO ackage + | SOIC8 ISH POWER VOLTAGE: 04.69 
KIGAGOSUOE &TSOP46 SAMSUNG ISB SPEED MODE: HS 480MH 


Te TTT TTT eee a 


Memarysize : |4 KB 








F @SOIce 
y Sige = Oxoo4o0000 
Supported by | xGecu T5é | TL866II Plus rice 
A.Enter model/MFC/ID > ivalue 
Model : AMZ5QH32B 
Manufacture : aM 
Device ID: | 20 40 16 
Userlame : | 
Moke ; 
5.add-to userlist : 


; save ry | Add New | 
Mote : Multiple choice with CTRL or SHIFT Key 
Back, | 
ply | Delete | Import | Export Share | 





( Verify after [~ Auto SN_NUM 
7 Skin Blank Addr Range: @ ALL © Sect [Reduce clock frequency if using clip or with ISP port] 
[ Blank Check Ox! ooooo0000) -> | OOSFFFFF 
Ready Default Programrer(1i): *XGecu T56 oooo oood 
STEP: 
1) Click [Check ID] to read the current chip ID 
2) Display the current ID value 
3) Click [ADD] in the toolbar 
4) Type in the chip model, manufactory, the chip ID read, and other information 
5) Click [Add New], a new model will be added in the user list 
6) Just double click the chip model in the custom list to use it. 
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10.2Add 2/7 series device 


Example: M27C128A is not in the supported list, the basic method of adding chips is the same as before, more reliable method of 


adding is as below: 


1. Select IC: Type in “27C128” to find, select AM27C128 @DIP28 Note: the chip package and chip capacity must be the same. 
2. Download the M27C128A IC data set from the Internet 

From the data sheet, you can find: 

Chip ID: 20 0A, VCC=6.25V when programming, VCC=5V when verifying and reading, VPP=12.50V for programming, pulse 


time is 100us 


Figure 7. Programming Flowchart 


Vee = 2 Foe oy 
Check all dytes 
VAO0715 
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3. According to the parameters in data sheet, modify the chip parameters as shown below: 
B Xgpro v10.75 O 
File(F) Select IC(S) Project(P) Device(D) Tools(¥) Help(H) Language(L) 
x P — = Erase A 
Ga 00D bed save | Pyro 1D secx ie a tam Ram [Eg ay P aout = pLeyy 
Select I¢ ———____- — —— IC Information(No Project opened) ——— - - — 
ChipType: EEPROM ChkSum: Ox003F coo0 7 ® 
— a az .| IC Size; Ox4000 Bytes ( 16384 Bytes ) XGecu bro 
Set Interface : 
le ZIF socket © ICSP port [7 IcSP_VCC Enable | Wec current Imax: [Default v| @ SBits © 16 Bits Save Log | Clear | dl 
0666-69066: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .....-----505+65 Ee ene ee eg er ee eee | 
6666-6616: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ...--------+-+--- i Programmer Connected. 
9900-0626: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .....----------- ere ole ee ee | 
‘ Device 1: XGecu T56 Ver: 00.01. 
o000-9036: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ...-.------+---- ac Gouee VoLnicE’ Gaccad 
eo00-9046: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .---------++-+-- USB SPEED MODE: HS 4Q0NH? 
68666-6656: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FEF FF ..w wn nnn nnn enna HHH HKA HAAR KAA AAR ET 
68668-6666: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ..- 2222222 een nee 
6666-6676: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ..--~------+-+-++++-- ANZ7C126 @DIP28 
9066-6086: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ........-.-..-.----- Memory Size : 0x00004000 
6868668-6696: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ...~.- 2222-2222 eee 
68686868-66AG: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ..w wenn nnn n nue 
66668-6686: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ...~-.-2222252505 
66686-69606: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .ww nnn nnn nnnnncs 
o660-6606: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF .....----------- 
68666-66E6: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF «...«~«~---+--+-20- 
68666-66F 6: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ..w wen nn nnn nnnes 
66886-6106: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ..w wenn nnn nnnnes 
AgRaAR-AAA1R- FE Fe FE Fe FE FE Fe Fe FE Fe Fe Fe Ee FE Fe FE < > 
FLASH 
-Options - IC Config Informaton 
I¥ Pin Detect l¥ Check ID 
VPP Voltage:|12. sav | V¥DD write:/—.25y | 
[7 Erase before 
Verify after [™ Auto SN_NUM vee Verityis.cov |=] ‘Puls Deley:|ioous [+] 
I¥ Skip Blank Addr.Range:@ ALL © Sect 
[~ Blank Check 
Ready Default Programmer(1): XGecu T56 - g000 0000 A 
4. Click [ADD] button in the toolbar 
In the following position, type in the chip model: M27C128A Manufactory: SGS-THOMSON Chip ID: 20 0A, as shown below: 
click [Add new] button 
ADD WEW IC 
User-defined IC list 
EMZ5QH326B WSOC xMC Pefrence : [amz7c1ze 
M2Z7C126i BDIPZS aio THONSO 
EIGAGOBUOE &TSOP46 SAMS ONG 
EMZ5QH326B @SOICe BMC packs [ree ~S~*~=<C~*s=‘“‘—S~*~::::::SS 
NZ7C128A BDIPZS SG3_THOMSO gore! ener 
EQGAGOSUOE HTSOP46 SAMSUNG 
Memorysize: |16KB 
Supporbed by [Gecu T56 } TLE6611 Plus 
Model : M27C1 254, 
Manufacture : | aT 
Device ID ; | 2004 
UserName : 
Note : 
Save Modify Add New | 
Note : Multiple choice with CTRL or SHIFT Key 
Back, 
Apply | Delete | Import | Export share | 
5. Double click the new chip to apply using it. 
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10.3Add NAND chips 


For NAND chips, theoretically you can customize all NAND chips. For ONFI standard chips, you can also automatically identify and 
add to the custom list. For non-ONFI standard chips, you can add it according to the IC data sheet. 


10.3.1 Select a NAND chip of any type with the same package 
K9GAGO8U0E TSOP48 package chip as an example to add custom. 
Arbitrarily select a K91GO8U0M @TSOP48 (you can select any other TSOP48 NAND chip) 


“gpre vl0.F5 
File(F) Select IC(S) Project(P) Device(D) Toolst¥) Help(H) Language(l 


es u Poa = EE 
ia LOAD Ue SAVE | inne AD ycecx oie oa + snp RAM Eg ay 


Select IC IC Information(o Project opened) 


ChipType: ANAND ChkSum: Mot Usec ®) 
pa en eae P| IC Size; OxO0_OS400000 Bytes 195169 KB AGecu” Pro 


Set Interface 


(* ZIF socket Polat Hepes Save Log | Clear | 
Search Device Marnifactony 1 
HG66-8B86- 2F (iio KOFIGOSUOM ETSOP4E er ee, 


8806-0610: KOFIGOSU0M AFBGA63 pnnected, 
HO868- 6828: Type EKSF1iGOSUOM #TSOP46 LETT RES Ra ES 


u TS56 Ver: OO.0 
gao8—HO28- fe da E9ELGOSU0M @TSOP4é 4 VOLTEGE: 04.80 


H0068- 86480: aoa 7 i MODE: HS 460MH 


BoGG-HB56: KERR E TEETER EEE ESE 
gog0- 060: © MCUMPU 


Anea-Ba7oB: © PLIVGALICPLD >: 2045 


9000-0080: © SRAMNVRAM : 64 
9008-6090: CO HAND : 64 
9006-60AD: 
9000-60B0: 
90068-60C 8: 
9066-66D 0: 
§000- O6E 8B: 
9000- O6F B: 
9006-6160: 
ggee- 6110: 
gge8- 6120: 
9008-6130: +H SANASUNG 
9000-6140: Pieva un Geren 
9000-6150: 


: 128KER + 4EB 
© EMMCEMCP : 1024 


© VWGA/HDMI >: 1eoeMB + 4096 


Block O SAMSUNG Electronic IC Total: 26022 


Options 
Pin Detact i check ID é data of the previous 
Erase before 


LT Verify after [ Auto SN_NUM 


Skip Blank Addr Range: f! 2 {© Sect 
pai a ec 


Ready Default FProgrammer[1li: 3Gecu T56 | Oooo good Zt 





10.3.2 Check IC data sheet to find the corresponding parameters 


. 1 Block = 128 Pages 
"(1M + 54 5K)Bytes 


1 Page = (8K + 436)Bytes 
1 Block = (8K + 436)6 x 128 Pages 
= (1M + 54_5K) Bytes 


265,728 Pages 
(=2.076 Blocks) 


a = 17,491 Mbits 
~ 8 bit 
~~ 436 Bytes 





ri 
Page Register eae 


_ 8K Bytes _- "496 Bytes 
Figure 2. K9GAGO8U0E Array Organization 
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From the above figure you can see, 

K9GAGO8UOE Parameter: 

Page Size 8K (8192) Spare Size=436 Number of pages per block: 128 pages, total number of blocks 2076 blocks 

In addition, from data sheet you can find, the operating voltage is 3.3V 1CE pin, 1 RB pin, 8-bit data width 

ID: EC D5 84 72 (only read the first 4 bytes) 

10.3.3 Set NAND parameters 


Click [Options] to set as below (3. Customize NAND parameters): 











rs .gpro vil 2 = B 
File(F) Select IC(S) Project(P) Device(D) Tools(v) Help{H) Language(L) 
a : . = Erase = 4 
a oad BASAE | LO. Spex FO on Bearer tan kam [ig ey Paso Be scy ele) 
Select IC ) - IC Information(No Project opened) 
| ChipType: N&AND ChkSum: Not Used 7 ® 
sleek eal >| IC Size: OxO0_08400000 Bytes 125168 KB xXGecu bro 





—Set Interface 


(* ZIF socket © ICSP port [7] IcSP_VCC Enable Vec current Imax: [Default | @ SBits © 16 Bits Save Log || Clear | 























KEK KATKKKKKTKKKATHKHKARAHHKATKHKEARHHTTAT 


1 Programmer Connected. 
KEES 
Device 1: XGecu T56 Yer: 00.01.37 
USB POWER VOLTAGE: 04.89 
USB SPEED MODE: HS 480MHZ 


ee 


Page Size : ¥CC Voltage : 3.0 - 


Spare Size : Bus Width : E Bits | 
Rages per Block : PIN CONFIGURATION : [ONF I STD | 


BlliocksPer#CE (Die): PACKAGE : 


re eee ee ee er be 


NanD CONFIG RESULT 
i ee ee ee ee eee ee ee eee ee ee ee eee ee he 
PageSize : 6192 
SpareSize : 436 
Pages Per Block : 128 
Blocks Size : 1024KB + 54KB 
Total Blocks : 2076 
Device Size : 2GB + 110MB 
Bus Width : 6 
nCE# Pin: 1 
nRB# PIN: 1 4 






#CEn (Die) : Internal ECC : 


#RBn Pins : Device ID : 


View Config Resault 3 
Spee 


~4. File name / Path / Block Assigned 

















Data access method: @ Single File Mode ,All Datas 


C Single File,Partitions Mode 


C Multiple Files and Partitions Calcu. CRC32 | : 
i 

— 

Block @File: 0 a 











Block O | Unique ID 


Options 























Options \ IC Config Informaton 
l¥ Pin Detect I¥ Check ID Note: click the up and down arrows to browse the 
re ; data of the previous block or the next block 
fase Deore 
[ver ft 
[7 Skip Blan 
[| Blar lech 
a) 
Ready Default Programmer(1): XGecu T56 - 0000 o000 y 


LZ 


1. | Check option [customize setting] 
2. Set value parameter according to IC data sheet 


3. Click [View Config Result] and you can view the final result in the right information column [4]. 


10.3.3 Add to User List 
AnD 


After the parameters are set, add new list in the same way as before, click the [ADD] button ——_____- in the toolbar to enter the 
ADD NEW IC dialog box, as below: 
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ADD NEV 1C 


User-defined IC list 


EMZ50H32B @SOICE xMC Refrence: [koFiqusuom —~*~*~*~*~S~*S 
NZ7C1Z8A BDIPZE SGS_THOMSO 

KIGAGOBUOE @TSOP4e SAMSUNG 

4M250H32B @SOICE xMC 

NZ7C126a @DIPZE SGS_THOMSO Package : [T50P48 

KIGAGOBUOE @TSOP4a SAMSUNG 


Memorysize : 1 GE 


Supported by [xGecu T56 / TLE661I Plus 


Model : K-95 4508U0E 
Manufacture : SAMSUNG 
Device ID: EC 05 84 #2 


Userhame : 


Moke : 


Save Modiry | Add New | 
Moke : Multiple choice with CTRL or SHIFT Key 
Back, | 
Apply | Delete | Trniport Export Share | 


Respectively type in the IC name, manufacturer and device ID. And click [Add New] to add to the list. 





Double click the added model, you can program the IC. If the read/write is normal, it means the addition is correct. 


10.4Import and Export Share 


@ For customized chips, user can export the database for sharing, just send the exported data file to the third party, who uses 
the import function to import the list. 
@ Export data, use CTRL or SHIFT key + left mouse button to multi-select and export multiple chips at one time. The extension 


of exported file is xxx.ULI. 
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10.5Commonly-used chip favorites 


For commonly-used chips, there is a drop-down list of the last 10 chips to the right of the [Select IC button]: 





el Xgpro v10.75 
File(Fi Select (C(S)) Project(P) Dewice(D) Toolsiv¥) He 


n | : 
Ga LOAD Ud SAVE | $3 mo TBhce oer CH ry . 


—Select IC - 

SAMSUNG KOF1GOSUOM @TSOP48 

ESMT FS9L2681A4(20484128) @VFBGAGS 

WINBOND We5032BY @SOics 

AMD AM27C128 @DIP28 

MICROM MT29F1 S01 AB AFD Gedo 2) GOPOFNS 

MICRON MT29F1 GOSAB AEAWP @TSOP49 

INTEL RC2SF512P30EF @BGAG4 ls] 

AUTO AUTO EMMC USP) 18 1.8Vlrecammend) 

AUTO AUTO EMMC 8B 1.8 @BGA153(recammend) me 

ATMEL ATMEGAI6BA @DIP40 ls] 
--Recent 10 -- le] 


If it is not enough to use, you can add to this custom list. 
Selection method: 
After selecting IC, directly click [+ADD] button in the toolbar, without modifying the content, directly add to the custom list. Next 


time, user can select the IC in the custom list. User can select the IC model more quickly. 
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11. Appendix 


11.1 Disclaimer 


(1) Products that have been repaired, modified by any organization or individual not officially authorized by us are not 
covered by the warranty. 
(2) The ZIF socket of the product and other man-made damages are not covered by the warranty. 


(3) Joint and several extended liability caused by hardware failure or software defects. 


Special Declare 

Due to the variety of chips supported by the programmer and the complexity of the software system, errors or defects are 
inevitable. In mass production, especially for OTP one-time programming chips, you must make sure that the programming is 
correct before mass production. We are not responsible for collateral expansion losses due to hardware failure or software defects. 


If you find any problems or have valuable opinions about our products, please contact us. 


11.2 Warranty 


Within one year from the date of purchase, if there is a failure during normal operations, can repair for free. 


11.3 Contact Us 


As the software is constantly updated, the manual content is for reference only and is subject to the product application. 


The latest version software can be downloaded from htip:/Awww.xgecu.com/en. 


Name: Haikou Xingong Electronic Co.,Ltd. 

Address: 4th Floor, Jingrun Hotel, No.80, Qiuhai Avenue West, 
Haikou, Hainan Province, China, Postal Code: 570311 
EMIAL: 532007590@QQ.com 

TEL: 0898-68681 816 


11.4 FAQ (Frequently Asked Questions) 


1) Device unavailable or error 
It is usually because the USB driver is not installed, or the driver is prohibited by antivirus software, at this time the RUN light on the 


USB programmer flashes rapidly. 


Solution: Refer to section 2.1 and re-install the application software. 
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2) Error when updating firmware, unable to refresh 


It is usually caused by using a USB hub. Please do not use an external HUB when refreshing. Please directly connect the 
programmer to the USB port of your computer to refresh. Restart the computer to test. If it still cannot solve the problem, please try 


to do the refresh operation on another computer. 
3) Poor pin contact 


Situation 1: Old chips, often there are some tips of poor pin contact, need to handle with pins carefully. 

Situation 2: If using an adapter, please use a multimeter to measure whether the adapter pins are normal. 

Situation 3: Individual pins of individual chips may not support pin contact check. In this case, you can temporarily uncheck the 
option <Pin Detect> in the lower left corner of the main interface. 

Note: Pin detect can only check if the pin is on, cannot check the contact resistance. 

If the contact resistance is too large, especially for NAND high-speed chips, it will also cause working errors. So be sure to clean 
the adapter, please do not easily trust any clip-type connection. 

Note: Pin detect can only check if the pin is on, but cannot detect the contact resistance. If the contact resistance is too large, 
especially for NAND high-speed chips, it will also cause working errors. So make sure to clean the adapter and please do not easily 
trust any clip-type connection. After clamping, hard twist the adapter so that there is a small amount of frictional sliding between 


cooper sheets of the ZIF socket and pin headers or between the pins of integrated circuit, to make a good contact. 
4) Check ID error 


Many chips have an internal chip identification mark (Identification). The content generally has two or more bytes, generally the first 
byte is the Manufacturer ID, followed by the chip type or chip capacity. Different chip has the different ID and the function of this 
option is to prevent incorrect chips put in. This option is to check the chip ID before reading or writing. If it is correct, continue. If ID 


incorrect, abort. This function is optional. The option is checked by default. 


For the same type of chip, different manufactory may program in the same way. For chips not supported in the list, you can 


select same capacity same type ICs of other manufactories to program. Because ID is different, before programming, uncheck 


the option <Check ID>. 





For few parts of microcontrollers, the chip ID cannot be read after chip is encrypted. At this time, the option <Check ID> should be 


unchecked in the main interface, otherwise check ID error will appear. 


5) Programming for chips 27C series VPP voltage 21V or 25V 


156 directly supports up to 25V. 

TL866II only supports programming voltage VPP up to 18V. For earlier 27C series ROMs, chips with VPP voltage of 21V and 25V 
are no longer supported for writing, but can be read. If used, you can replace with the same type of chips that their programming 
voltage are 13V or 12V. For example, 27C32 chip, its programming voltage is 21V or 13V. The chip can be directly replaced. 
Please do not use an external power supply to raise the voltage for forced programming. When the chip is damaged, the 21V/25V 


high voltage may run back into the programmer and there will be the hardware damage. 
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